Static task
static1
Behavioral task
behavioral1
Sample
KONTOAUSZUG.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
KONTOAUSZUG.exe
Resource
win10v2004-20220812-en
General
-
Target
8193136387.zip
-
Size
528KB
-
MD5
7829d7c31d95883eb24da159ee1659cd
-
SHA1
85601794f668c27d8293a770b30034424c06c4dd
-
SHA256
d490bd61375c25efaddd9a36af960dd992579604dc88d92bcc71c4f9d49e8a63
-
SHA512
2c72e630afe230f6a4ef8eae5c71424bc23e3bced4a68715c0af628146cb149dfe8b8322433c1ec0081e5322ff274a0bf8c492bbeb8a976e0c94d6504bc72682
-
SSDEEP
12288:s+XAqBBKHNnp4lbRnM0VJvtDN9ZYns1qP4txmx0DmlR0Y:sE6naM0VJFpAHWS
Malware Config
Signatures
Files
-
8193136387.zip.zip
Password: infected
-
4df608effe69735c89761f008c168ea5cec7db1935151f1dfa8f5d4a85e31f94.rar
-
KONTOAUSZUG.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 967KB - Virtual size: 966KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ