Static task
static1
Behavioral task
behavioral1
Sample
47c3576b5bb597196cec1129629e74b0cd60c0fa079d5b41640b6d1ede56ca4e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
47c3576b5bb597196cec1129629e74b0cd60c0fa079d5b41640b6d1ede56ca4e.exe
Resource
win10v2004-20220812-en
General
-
Target
47c3576b5bb597196cec1129629e74b0cd60c0fa079d5b41640b6d1ede56ca4e.zip
-
Size
625KB
-
MD5
37468e44ac1b9d9c09323cb9deb89a7d
-
SHA1
6908979869d1aabbd261c8b77f286f604508fbd9
-
SHA256
73763ba3a9d12ca022304576557a4c353b1f683c9701034fd993366ba582d2c7
-
SHA512
bbbccc9956633eb9e0af131d0a421e747bbe0957254964e79523ead9fc6f660fcbc6702a7ac76684b7ac50f9c2a2801a95e045b8005f7dc17479c8c30824acfc
-
SSDEEP
12288:vBSGaHFBC/0fExdhjqWvisx2tmMdkAMs6qPfRXqKNlrp1/UnnUsEIADij7B:pIOjIm2vkdhSlqKNF/UnnUsEaXB
Malware Config
Signatures
Files
-
47c3576b5bb597196cec1129629e74b0cd60c0fa079d5b41640b6d1ede56ca4e.zip.zip
Password: infected
-
47c3576b5bb597196cec1129629e74b0cd60c0fa079d5b41640b6d1ede56ca4e.exe.exe windows x86
343d471493780630021b96af04ba810a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
winmm
PlaySoundA
user32
LoadAcceleratorsA
gdi32
CreateEnhMetaFileA
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
advapi32
SetThreadToken
shell32
DragAcceptFiles
shlwapi
PathRemoveExtensionA
oledlg
ord3
ole32
OleGetIconOfClass
oleaut32
VarDateFromStr
Sections
.textbss Size: - Virtual size: 969KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 618KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE