BXdAixCmKS
HyOrVQRWaI
ONolNoblqZ
PEREwJqIC
PYDEknOmqN
PluginInit
TVAWeant
TwZHXRjUouF
VAKPNMbX
VbSGOlB
XQFZIaMHEUb
bKURaGAtryd
bMRwwkTSwv
fzZmnrs
gwtIRKTns
orRpPedNqVt
uWkeKvgItVn
Static task
static1
Behavioral task
behavioral1
Sample
documents.lnk
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
documents.lnk
Resource
win10v2004-20220414-en
Behavioral task
behavioral3
Sample
textins.dll
Resource
win7-20220414-en
Behavioral task
behavioral4
Sample
textins.dll
Resource
win10v2004-20220414-en
Target
StolenImages_Evidence.zip
Size
224KB
MD5
f00d39fd361eea5a1c049463c441d4d3
SHA1
05efed085bd50df4384159c1c51d73e9ff6918d0
SHA256
ebdd0354f227a3631513d26322e4c104af8622571ed1e735e48bf297834625e6
SHA512
b3eb0fb0b2f84237f80520a8e4f8f19edfefdd092d66e3daccfa111ac0230d4348d9a7518ba50a95ccf883d6b3d679fd71a63c748d1cb3adaf0b803a02405997
SSDEEP
6144:N4mUPriLxC4NHbPpzM4DrCaG9gkaVUbRAdYoO+:N9UTMFN7PpM4v3ViAxl
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
BXdAixCmKS
HyOrVQRWaI
ONolNoblqZ
PEREwJqIC
PYDEknOmqN
PluginInit
TVAWeant
TwZHXRjUouF
VAKPNMbX
VbSGOlB
XQFZIaMHEUb
bKURaGAtryd
bMRwwkTSwv
fzZmnrs
gwtIRKTns
orRpPedNqVt
uWkeKvgItVn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ