Static task
static1
Behavioral task
behavioral1
Sample
Microsoft Toolkit.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Microsoft Toolkit.exe
Resource
win10v2004-20220812-en
General
-
Target
MDE_File_Sample_15178fb9ca0b0f8ecc67386d7365c992c3e00f80.zip
-
Size
34.2MB
-
MD5
ededeaf7ef8d156843c195c392c7ad2f
-
SHA1
19081ea4f36971ef0f52038041ef270eabe7a7a7
-
SHA256
d9e7ae78d5b248e3e3e336d02cdefe3e8c41256299dd00fcf2198e6447b7f27e
-
SHA512
ca345c92a8f0b7e5c12752987b73cf29eb2823d00dbc4fa142c0bff467af35e4662caa5148e7cfefc65b27bd1b128829e08cd630eca409057b5db1bf8d56a9de
-
SSDEEP
786432:wbEDD3z/iluY/EyS/SU8O6jD2XM6iAyCMXVeYGzcN3yhQ:ZPKYvyS/SUr0eYGzNhQ
Malware Config
Signatures
Files
-
MDE_File_Sample_15178fb9ca0b0f8ecc67386d7365c992c3e00f80.zip.zip
Password: ITSS2022
-
Microsoft Toolkit.exe.exe windows x86
Password: ITSS2022
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 34.8MB - Virtual size: 34.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 366KB - Virtual size: 365KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ