Static task
static1
Behavioral task
behavioral1
Sample
Policy_Document.iso
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Policy_Document.iso
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
Policy-Document.exe
Resource
win7-20220812-en
General
-
Target
Policy_Document.zip
-
Size
1.9MB
-
MD5
b5a1d999a5852dd4b160d37633b7d3a5
-
SHA1
1f1a064d9b34ff48f07ebead8bbea5161a3b66f6
-
SHA256
99c95ed1a1192492b4f73a54381f02e927ce26dcae0489b63be67401e015cc78
-
SHA512
76e4659e70edb504239530f3e215559edd0e3d5aa3fd3e29284a4a2d74f2510d7ccacb097dc15c1d3f0f8a696165c5d36d803b34f01209769124a12e8bf87aaf
-
SSDEEP
49152:D2/zscfvo5kUJlRthr0k1DJOrB6JH5zvRrLm:6/zVIp5hdXOrB6JH5trC
Malware Config
Signatures
Files
-
Policy_Document.zip.zip
Password: Policy1234
-
Policy_Document.img.iso
Password: Policy1234
-
Policy-Document.exe.exe windows x86
Password: Policy1234
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 170KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ