Static task
static1
Behavioral task
behavioral1
Sample
c688771d462dd43de49442bc6297db435c3138dddb7625e4d2fccb145463ac22.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
c688771d462dd43de49442bc6297db435c3138dddb7625e4d2fccb145463ac22.exe
Resource
win10v2004-20230220-en
General
-
Target
24b2856cb9840f3b7131827e32cb73c9.bin
-
Size
13KB
-
MD5
10a81f776a039c03c237a411a4406c7b
-
SHA1
e307db01ef03b7cabf545ec25e5506670ac71d24
-
SHA256
944b9d19590f1a55e501dd1305968a718c2cbcc25ec4eeaba4b31d2ffae2e328
-
SHA512
054a9040282d7076a0361a2756b3dab6a15c8c1e50755214670d00e0068bb6cef95726db01c16903cb3302eb4fa506414474cff7969acc32353bff6430d421dd
-
SSDEEP
384:p8WUz6VwZxLoIKOADPceaqUi9Z+8Ycp5SA/Z0u:ppUz6VmoILgPhaqJ90dcp5SAB0u
Malware Config
Signatures
Files
-
24b2856cb9840f3b7131827e32cb73c9.bin.zip
Password: infected
-
c688771d462dd43de49442bc6297db435c3138dddb7625e4d2fccb145463ac22.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ