Static task
static1
Behavioral task
behavioral1
Sample
ZB_1997e758e3.exe
Resource
win7-20220718-en
General
-
Target
ZB_1997e758e3.exe
-
Size
487KB
-
MD5
25d40c676222d431691223ea256c5be0
-
SHA1
844e84f81a6fcb00af333793bccdf960377dd7d0
-
SHA256
76b075d9a92f124e01df0a2c3f86ea729666db05b813d499fb3ce6d2402f42d9
-
SHA512
1e140f4427fd5989b28827169126445c2bf7a8059a3279fa419c9d8280998e1c005234d1a5c3bf87a79d527adf153ccf199e070a0ae9ab2bef62437d3fd76161
-
SSDEEP
12288:H34ZXBAqJUMe651zwurXJi8x6a3TQPlE:H3WBfY65r/xJT+l
Malware Config
Signatures
Files
-
ZB_1997e758e3.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 461KB - Virtual size: 460KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ