Static task
static1
Behavioral task
behavioral1
Sample
Copy of SERI BIJAKSANA SERVICE ENGINEERS - 5th Apr update.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Copy of SERI BIJAKSANA SERVICE ENGINEERS - 5th Apr update.exe
Resource
win10v2004-20230220-en
General
-
Target
Copy of SERI BIJAKSANA SERVICE ENGINEERS - 5th Apr update.exe
-
Size
1.2MB
-
MD5
af414ea3cef3b9bc3a1b4e0d261d7008
-
SHA1
14a1894145ffef18119d5122e9c65f9b82f0db7b
-
SHA256
4138cd9b2b50e8f3fbf5c2bd09d0bf01dfe8d108295b5d92c02d82d8c0841eea
-
SHA512
d16ba2083fbb278e57915a546dd6081d6e91c20eb2184d5644bec0b96ba53cfdf23c086a8e2942e898798a5c78fd36deec08f9e3023c006e8bcc9e8eaeb2a5c5
-
SSDEEP
12288:yz9aXwam1UP/QE/OG0kxp2DKg6HMB2gZ0Ki7qGUsp/1/N3ZAsEIQ5cbhYGrOrKXr:YQmKmDALdkIAZAmy2WwS+
Malware Config
Signatures
Files
-
Copy of SERI BIJAKSANA SERVICE ENGINEERS - 5th Apr update.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ