Static task
static1
Behavioral task
behavioral1
Sample
toba22bbc.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
toba22bbc.exe
Resource
win10v2004-20230220-en
General
-
Target
toba22bbc.exe
-
Size
977KB
-
MD5
13348cb1966e434e5cb63b82e42291b7
-
SHA1
0c8c616bbdf2b7996358142af6a6ba886fc2b2a9
-
SHA256
edcf7182460deb84c07d79968ebb518cc9c8611148a4eb0e1e37b78ff175f275
-
SHA512
0c9f23bd9e17dad82ae5a634ac92f252e522f76de693e82210449bcb08e6038880a8a4a028632cd74764d2778f141d0cfd39754ee06348007e1b90968654643b
-
SSDEEP
24576:8FUrdbfahvepYoeyAmzhocZn+M+WGDBGkV:8Yb1bPhoCnD+WGIkV
Malware Config
Signatures
Files
-
toba22bbc.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 975KB - Virtual size: 974KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ