Static task
static1
Behavioral task
behavioral1
Sample
DOCUMENT.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
DOCUMENT.exe
Resource
win10v2004-20220812-en
General
-
Target
8121636855.zip
-
Size
274KB
-
MD5
858de3c17ec7c04abc9f81a53f5d477f
-
SHA1
bb0347eb8eef18b7926dc4bdfd3dd0a8fff2bab3
-
SHA256
3892519a33217ac74c5c6ce2bc2c1936d1cd5800fb30ebe515d38676c2c51a5b
-
SHA512
2498a4d21b0be921ba91c7af2aca7fd7378287cc5569b515ce21c6d81f61105982dfbbed0992761e72a29d7e42c5e4cbe5fd560814a7ac39c346c897b9569852
-
SSDEEP
6144:HyQkJOFq8cYL8xXVVLQlwQbmUj972vVxAUndkLqc2jrE:HyQEOFGKcl9D4r97Y/AUnXE
Malware Config
Signatures
Files
-
8121636855.zip.zip
Password: infected
-
76fa3ea331761117ee25837c6c100ee94612e3027a4c6c968f93d23ba034bad8.iso
-
DOCUMENT.EXE.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 409KB - Virtual size: 409KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ