Static task
static1
Behavioral task
behavioral1
Sample
Purchase contract.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Purchase contract.exe
Resource
win10v2004-20220812-en
General
-
Target
Purchase contract.rar
-
Size
487KB
-
MD5
79ad6664caf1907778b6e0792b8a6f95
-
SHA1
5dafbc5b00ff0643777894239d68d6d9cb495885
-
SHA256
c6ac34b4f0efb8c3f51446b8597a351d67611810b37269177ec3c1dee3565a89
-
SHA512
6c4fff8b96e9f31afab3d070f6ae35cc5b003643e4c38662f69c36d187a453d03553808d28bd24b68f19e9aad4a6f246c9951e91e2e38edfb9de4c828f35c00f
-
SSDEEP
12288:+6IO/5TisbOMTV795mEnTZ3Xof1ttF2D6J74YPMFYF:+6IOx2sRTVHmEnTZ3XQV22J7lUGF
Malware Config
Signatures
Files
-
Purchase contract.rar.rar
-
Purchase contract.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 896KB - Virtual size: 895KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ