Static task
static1
Behavioral task
behavioral1
Sample
MEDIFORM SA COMPANY PROFILE.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
MEDIFORM SA COMPANY PROFILE.exe
Resource
win10v2004-20220414-en
General
-
Target
0bb09694c6d22f4bc519e0d12d5216a258e769995067ddec593361c4ee30a004
-
Size
408KB
-
MD5
2af6c0b648c19a620f1276144df9416d
-
SHA1
eea7dba23183420589f8fd72c2605e8d237a817f
-
SHA256
0bb09694c6d22f4bc519e0d12d5216a258e769995067ddec593361c4ee30a004
-
SHA512
883ff76124df210757a612da59081bb005e773c8aa8a3506b44b2b21f576f45265d6a8be69e91dcb3ef013e0b68dd666363577f12c8a821d708301578798065b
-
SSDEEP
12288:N/ZwJbeUkTaV6qMNUpStnqMnUWxhhJYGdfB8kfsvE:IdcQMNUAthdJJY058kk8
Malware Config
Signatures
Files
-
0bb09694c6d22f4bc519e0d12d5216a258e769995067ddec593361c4ee30a004.rar
-
MEDIFORM SA COMPANY PROFILE.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 473KB - Virtual size: 472KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ