Static task
static1
Behavioral task
behavioral1
Sample
attachment-3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
attachment-3.exe
Resource
win10v2004-20220812-en
General
-
Target
7c1b74ea9d039c3e0610eb48b370c647
-
Size
42KB
-
MD5
7c1b74ea9d039c3e0610eb48b370c647
-
SHA1
81019944295c002830448f8cb3708ea032d79ab9
-
SHA256
4ce7c32dfc4931b50c25702e8e44f1a1862baabf563ba7945d4d7c5617bdd321
-
SHA512
56cac2ec31a91917652a30437bfc899e10a8bc9b49c4de1976291561ddc84190a4d9e078a242001b3daff856c743557b1f9e14c243930d96db14f1c01c81ab45
-
SSDEEP
768:vGUfP3Gn/3iXjsm24RsFCha29nmAsIpS1aWzcI6HDKQjakmDvjH:vGIGPAHJQCha29nmAsMS7zCHDJBujH
Malware Config
Signatures
-
resource yara_rule sample dropper_html
Files
-
7c1b74ea9d039c3e0610eb48b370c647.eml
-
attachment-3.exe windows x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
����t Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����ta Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����a Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
email-html-2.txt.html