Static task
static1
Behavioral task
behavioral1
Sample
Device/HarddiskVolume3/Users/Jefe de IT/AppData/Local/Temp/Rar$EXb3368.40320/vegas.pro.20.0.0.139-patch.exe
Resource
win10v2004-20220812-en
General
-
Target
LTMXCUNAN4_2022-10-05_11_20_03.zip
-
Size
23.6MB
-
MD5
c4003c70ec0d518a2f8eb7f6170cdec6
-
SHA1
a6dbda42193b4bdc4f29e9aa8867667beeb96f7c
-
SHA256
31f30f00d394a83d1306c1b1bd277b912c06102852c87d928f8d02bb05876231
-
SHA512
999c42b925a151ed64310fdd141b4d84f12fdf6b5b60010a1d5e8f1f687a466e47b8cfd3561735c87d58a0301c520f9030fb6da1f5b81253b99b5ef1d722116e
-
SSDEEP
393216:nsD7E0PR109odA5VWUGq2FDxVhzlwJIZ/w2524nk9uffDtZgbtQuX7mSkFzjeMrz:sD7E210AA52pFNaJIZ/z3k8ffHRuLQFL
Malware Config
Signatures
Files
-
LTMXCUNAN4_2022-10-05_11_20_03.zip.zip
Password: Malware1234.
-
Device/HarddiskVolume3/Users/Jefe de IT/AppData/Local/Temp/Rar$EXb3368.40320/vegas.pro.20.0.0.139-patch.exe.exe windows x86
Password: Malware1234.
dc73a9bd8de0fd640549c85ac4089b87
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
ExitProcess
FindResourceA
FreeLibrary
GetModuleHandleA
GetProcAddress
GetTempPathA
LoadLibraryA
LoadResource
RtlMoveMemory
SizeofResource
VirtualAlloc
lstrcatA
CloseHandle
CreateFileA
FlushFileBuffers
WriteFile
Sections
.text Size: 512B - Virtual size: 502B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23.9MB - Virtual size: 23.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 82B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
manifest.json