Static task
static1
Behavioral task
behavioral1
Sample
1d1947aec877778274e161f12b3f9a1e2a995cf7a5ab8a92323c8f7512111181.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1d1947aec877778274e161f12b3f9a1e2a995cf7a5ab8a92323c8f7512111181.exe
Resource
win10v2004-20230220-en
General
-
Target
6e7d8daa326c2468ecb37b8e80a1a26c.bin
-
Size
3.6MB
-
MD5
2e5c6f151dc22b6d958ce5f8cdce271f
-
SHA1
62eb36b7b803a5290ecf583f9911f431e0048905
-
SHA256
f12274d827b096283d0fdf9e9e2a9327624bce6b5f6fbac58a69eef0163fbe79
-
SHA512
46df84542efa609fff587be9029f01fc492e9b3da5949faa385897818262b8391f52a8b9a127460f6d824dc3e1f01a24813e92e7c6235ef837b32156cd395d00
-
SSDEEP
98304:POVoTH2/DuAb4z/lg2mhwEpn8yWzoxDHeuZSyaLW:PO66iAbNwEpXW2D+MHaLW
Malware Config
Signatures
Files
-
6e7d8daa326c2468ecb37b8e80a1a26c.bin.zip
Password: infected
-
1d1947aec877778274e161f12b3f9a1e2a995cf7a5ab8a92323c8f7512111181.exe.exe windows x86
Password: infected
215a4ae286896fe0a1129217f898f7a0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
lstrlenA
LocalAlloc
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
shell32
ord524
ord239
ole32
CoInitialize
Sections
.text Size: - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmpi_-- Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp__-- Size: 512B - Virtual size: 460B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmpc_-- Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 127KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ