Static task
static1
Behavioral task
behavioral1
Sample
f3f3fee0e272e4766061161496cce13d0f018f837dac7f66078b13c1889ded20.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
f3f3fee0e272e4766061161496cce13d0f018f837dac7f66078b13c1889ded20.exe
Resource
win10v2004-20230220-en
General
-
Target
4ed445c5deb5ea0980cbd5656fa1d35f.bin
-
Size
446KB
-
MD5
d3798216ab6ac5b05af01d4a5f35275c
-
SHA1
a73b015134c1191d3de73f6a578ae75913226894
-
SHA256
483fb057c03faebd01aaa2a3027b3920492bccfc0108229d481dd0e06f914565
-
SHA512
0e5c17f979ad57f6bcca6477d52418542c6240a4c9f6986306e9c7c28a40998056160eddb47d0d662534922a97e94954eae348f7c7b91f264b860c5dab95419a
-
SSDEEP
12288:mbWlBmPAzKQB4+fWqpG82+y/pxy079oxgm:msBmmK8rbM/7Lmr
Malware Config
Signatures
Files
-
4ed445c5deb5ea0980cbd5656fa1d35f.bin.zip
Password: infected
-
f3f3fee0e272e4766061161496cce13d0f018f837dac7f66078b13c1889ded20.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 606KB - Virtual size: 605KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ