Static task
static1
Behavioral task
behavioral1
Sample
e1fa8877678bb2a1a8bc73a45ab2bfbd28b210b0be034a3ce1ba1849e7c5327b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e1fa8877678bb2a1a8bc73a45ab2bfbd28b210b0be034a3ce1ba1849e7c5327b.exe
Resource
win10v2004-20220812-en
General
-
Target
d90caad2-12ec-4722-5ede-d377773b42c2.zip
-
Size
3.9MB
-
MD5
771b396c9d449591026078f0085015a0
-
SHA1
ff4a99df2491224c438fdb003d36bc5dd94624f6
-
SHA256
b719caeb3b0fbc5174c9329ffb61de74b61631d81f9afc437b23cc982b1d79b4
-
SHA512
0028c098abf997b2e111ade50586f1b9613bdf6d7605b65bb83dafb67d6a1853afc7fedafc15cbe094ecc97eb944e9b970ab5ae63b2f5403bed531f76684dda7
-
SSDEEP
98304:02PEIg17DPtgJfvs5hclW4CL+0b/lztcQ6eX6qs4vR:02K17D6J85hMLL0rlz/KqLR
Malware Config
Signatures
Files
-
d90caad2-12ec-4722-5ede-d377773b42c2.zip.zip
Password: infected
-
e1fa8877678bb2a1a8bc73a45ab2bfbd28b210b0be034a3ce1ba1849e7c5327b.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ