Static task
static1
Behavioral task
behavioral1
Sample
G3651586539.zip
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
G3651586539.zip
Resource
win10v2004-20220812-en
General
-
Target
G3651586539.zip
-
Size
335KB
-
MD5
114e70577cef4a6fa95c87cb466dd130
-
SHA1
f8b309cba7ffd889b2b41c136046e756a48751b3
-
SHA256
d974945b1b9d63a0c82f563ddd4baea79ae9d3cdf336f0272f4d3f004df15e3d
-
SHA512
0a18fe87454a50013e5c927e24ded8c153a779f30c29355e37d6fd96b6ea132300f14f632573cdaaf109c29b86c9fd28650e3cc7282860630147fece6e69628c
-
SSDEEP
6144:tR2UHMHEkkPZF73Qc/AiJ86yZPpmZkSjsIMkGRnMCQXJBPFEPUZCKo:f9sktZta6yaZkStbXJ1FEx
Malware Config
Signatures
Files
-
G3651586539.zip.zip
Password: H322
-
Card#6859.iso.iso
Password: H322
-
CardS.lnk.lnk
-
anticipations/blues.db.dll windows x86
Password: H322
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 365KB - Virtual size: 365KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
anticipations/deepeningBlockhouse.js.js
-
anticipations/mucksNatively.cmd