Static task
static1
Behavioral task
behavioral1
Sample
revised original documents.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
revised original documents.exe
Resource
win10v2004-20220901-en
General
-
Target
revised original documents.exe
-
Size
1.1MB
-
MD5
cc98bc7f6a37ab1e9ec3e3257e15c854
-
SHA1
bc7a13f6051b7ffb0d4f969ba24614f88cea0035
-
SHA256
c30e355a92bee2c46c8e7cb9dea3532e99579e68b3a147d566dd8929a99d5893
-
SHA512
dbed212a92f976384034deec7f8a773d90db42c33ef5e5751b35227a5abf1fe634c688f35bbe50931f2963a8e09cba7a81e07d825d862869c7d862d9b5d9f5bf
-
SSDEEP
24576:q1Uv6ZAkgpwBVTKQMj3WH0DBnrsFFjrX:qTZ0wru9rsFFP
Malware Config
Signatures
Files
-
revised original documents.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ