Static task
static1
Behavioral task
behavioral1
Sample
attachment-3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
attachment-3.exe
Resource
win10v2004-20220901-en
General
-
Target
702870380eebef3d430efa327e2a6ebd
-
Size
42KB
-
MD5
702870380eebef3d430efa327e2a6ebd
-
SHA1
8aca813992c8602a5f6b8596c06d42f0ac07070a
-
SHA256
dcd76b97c39c2532ce7dca9278769d016aee8ebb7432e463663070524f6f1a87
-
SHA512
a02cab7f3ed95c74564d8fc2e49d4cf412a995420f11ad8fa5cebe5914a4678fb6fedde5aa809785634dd9732823ce40bf71df41d6d1ae35d6eb0f577f2133f2
-
SSDEEP
768:UB3iXjsm24RsFCha29nmAsIpS1aWzcI6HDKQjakmDvjH:WAHJQCha29nmAsMS7zCHDJBujH
Malware Config
Signatures
-
resource yara_rule sample dropper_html
Files
-
702870380eebef3d430efa327e2a6ebd.eml
-
attachment-3.exe windows x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
����t Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����ta Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����a Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
email-html-2.txt.html