Behavioral task
behavioral1
Sample
Slipware.exe
Resource
win7-20230220-en
General
-
Target
Slipware.exe
-
Size
1.3MB
-
MD5
eab003fd0f22b2a5e44aaf7a0bd37f28
-
SHA1
a054a333bca9947b79792a75fefc3830b95cf96a
-
SHA256
75f94abaccf17c5bd5b118c3bb9335371fa5f983b8afef225b935ed15b7c5aaa
-
SHA512
6f52cd5f08a6da874e7b96febc0ad681dc5a520f67168a117421b13ab967ae3b8c4c159f30a8d08a8b0f3b88ca457b627f1c21fc986d7125439bd2d52c37f830
-
SSDEEP
12288:eTEYAsROAsrt/uxduo1jB0Y96qII7bqk6Jw7cWo2JsN/0Jfdr39N0l+tlwHUI7:ewT7rC6qIIqk6JwvoAsNsztvG0I
Malware Config
Signatures
Files
-
Slipware.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 266KB - Virtual size: 265KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.eter0 Size: 442KB - Virtual size: 442KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.eter1 Size: 172KB - Virtual size: 171KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 206KB - Virtual size: 205KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ