Static task
static1
Behavioral task
behavioral1
Sample
Order 10644073.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Order 10644073.exe
Resource
win10v2004-20220812-en
General
-
Target
3fb9d2a70258105b460431ca6e720fe0
-
Size
2.1MB
-
MD5
3fb9d2a70258105b460431ca6e720fe0
-
SHA1
e46d9a651c92f9950561e7141d5b009d03c7b7db
-
SHA256
ac1929034d84d7eafd1f4ecc7081dd4ff7e2724987dbfadc59f4edabeebf18b7
-
SHA512
c9a1d3732086d69e97ac0e3d9ef433fe1a93540d6dfcb9a19c9057b905c66c475d11c8485741b6d3c4ca3c2f7421f5da647399c30f36f3d38201368c3c9b8436
-
SSDEEP
12288:UBJyF0HynaoOVxSZaGupdIrp1OM3lrQXCAuH66lnXwmoa6yn8GVOVEeGCMNh:g9Hy8bcaGurICM3lksHNXwmoa6wOhU
Malware Config
Signatures
-
resource yara_rule sample dropper_html
Files
-
3fb9d2a70258105b460431ca6e720fe0.eml
-
Order 10644073.exe.img.iso
-
Order 10644073.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 944KB - Virtual size: 936KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
email-html-2.txt.html
-
email-plain-1.txt