Static task
static1
Behavioral task
behavioral1
Sample
b8a3da8c60459974767732321a29b91dfea59ab5ad993caf832f2bb2484b5c96.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
b8a3da8c60459974767732321a29b91dfea59ab5ad993caf832f2bb2484b5c96.exe
Resource
win10v2004-en-20220112
General
-
Target
b8a3da8c60459974767732321a29b91dfea59ab5ad993caf832f2bb2484b5c96.zip
-
Size
17KB
-
MD5
c05d45bb045c196472c7bc51f90389a3
-
SHA1
197d33bda32ecc09aec730b7ba91a70d859a7a41
-
SHA256
90561835c00d32961a5d49e4fc883e70a1685119e0618b93f7256c1b7e9baa0f
-
SHA512
11f4d4cef7111a026250596725e8253c5462a489e238b011d683310892fcd7a9f906886b6a4b74463d3c3065484dc87366e735b426314f399f9aba1621178407
-
SSDEEP
384:hCiX4HSFXOf0o+LjLRDxCg8CDKQZlOQBh015WTS5iISQtzaJgCXRvZCL:ocOf0o+LVxpXOQOkTXQ5QguZM
Malware Config
Signatures
Files
-
b8a3da8c60459974767732321a29b91dfea59ab5ad993caf832f2bb2484b5c96.zip.zip
Password: infected
-
b8a3da8c60459974767732321a29b91dfea59ab5ad993caf832f2bb2484b5c96.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ