Static task
static1
Behavioral task
behavioral1
Sample
PAPER LABELs MADE IN CHI BL PL and INV CGKIR00012759.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
PAPER LABELs MADE IN CHI BL PL and INV CGKIR00012759.exe
Resource
win10v2004-20220901-en
General
-
Target
PAPER LABELs MADE IN CHI BL PL and INV CGKIR00012759.exe
-
Size
790KB
-
MD5
22563b662844992d4e6da5284724c1cf
-
SHA1
42f76c2060bc0b145bcfb7b6ac0573d992680d63
-
SHA256
672dfe85ece65a72aab50b726b15e61ae7b562f19de89ef17e5fe988abc85823
-
SHA512
9cfdab4d41ccbc2ed9101590a8696a5e428dac50b948360186fbc21c53c1bb26de68cb2eaceb45ed6fdc5ca11e48c72bfabbc1e6f2ac8c35106c2824cb34a0ef
-
SSDEEP
12288:hp/oqGPnJA5HEwSAq/vaaHP7Zzl33IrOVv0CUMv:NGitE9GK1J33UOVv5
Malware Config
Signatures
Files
-
PAPER LABELs MADE IN CHI BL PL and INV CGKIR00012759.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 782KB - Virtual size: 780KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ