Overview
overview
3Static
static
3941990_protected.zip
windows7-x64
13941990_protected.zip
windows10-2004-x64
15127E7ED77...755F27
windows7-x64
15127E7ED77...755F27
windows10-2004-x64
15127E7ED77...ed.exe
windows7-x64
15127E7ED77...ed.exe
windows10-2004-x64
15127E7ED77...ta.bin
windows7-x64
35127E7ED77...ta.bin
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
3941990_protected.zip
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3941990_protected.zip
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
5127E7ED77D4D85420705A114D3B7B970E755F27
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
5127E7ED77D4D85420705A114D3B7B970E755F27
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
5127E7ED77D4D85420705A114D3B7B970E755F27_decoded.exe
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
5127E7ED77D4D85420705A114D3B7B970E755F27_decoded.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
5127E7ED77D4D85420705A114D3B7B970E755F27_decoded_meta.bin
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
5127E7ED77D4D85420705A114D3B7B970E755F27_decoded_meta.bin
Resource
win10v2004-20220901-en
General
-
Target
3941990_protected.zip
-
Size
976KB
-
MD5
88d084cc3be12b4fbd22f421d8ad49ed
-
SHA1
196b7a17514b25c5c1875e827408a8bc87b065b3
-
SHA256
b3c38476f98743aeeb29e7738b98d6fb813208675eba907f2ee694c25fc024cf
-
SHA512
e010511a8c2d1a5469b17030efcb6e95e5b363a35e508bdfba6d430a910aaadeb049a01d0a73efaf6c10ab2fdac184c861c8bd321d02e4042d967e7df581cebf
-
SSDEEP
24576:G5Rg9yeTTPOKMp/95nTNwSa3Rwni32H6X379D3WP8TCQeD:D9yeTTP1MpV5npa39ZDpyD
Malware Config
Signatures
Files
-
3941990_protected.zip.zip
Password: infected
-
5127E7ED77D4D85420705A114D3B7B970E755F27
-
5127E7ED77D4D85420705A114D3B7B970E755F27_decoded.bin.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 588KB - Virtual size: 587KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
5127E7ED77D4D85420705A114D3B7B970E755F27_decoded_meta.bin