Static task
static1
Behavioral task
behavioral1
Sample
5a9397f2ec2a6609708ad1bbbff41e1d6d099d863d0714003d35070be9786edd.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
5a9397f2ec2a6609708ad1bbbff41e1d6d099d863d0714003d35070be9786edd.exe
Resource
win10v2004-20230220-en
General
-
Target
5e627eb287e1a5b9bd3a008099b060ee.bin
-
Size
457KB
-
MD5
de3870306b31086940af337ad9309e88
-
SHA1
15bb6b647b22cce32d7f4374d5af51f5c4fec17d
-
SHA256
1a71f63fd78f065705b164a0f7623770c6be40b8a2985d9dfb0d2620cdd0496c
-
SHA512
4d1436ec4abe60e5b03fb49150f566aef9fd02eb3532b664486cae7e0f051638ff73a83bcb1a3dc12080226c179d4b070ac17bd6a18a1c49546cd7f1cf1bf538
-
SSDEEP
12288:WEn/1RO3YwkWN1GNXPBtdIjiyJ55YaRz4EcvGs/ED61ug6:CEWjcfBtts5YaRPcvGyED60g6
Malware Config
Signatures
Files
-
5e627eb287e1a5b9bd3a008099b060ee.bin.zip
Password: infected
-
5a9397f2ec2a6609708ad1bbbff41e1d6d099d863d0714003d35070be9786edd.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 612KB - Virtual size: 612KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ