Static task
static1
Behavioral task
behavioral1
Sample
WKR001.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
WKR001.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
WKR002.vbs
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
WKR002.vbs
Resource
win10v2004-20220812-en
General
-
Target
WKR001.zip
-
Size
407KB
-
MD5
9c3af373fd11566c1a704ee1714abe67
-
SHA1
61da64a60e4322fb92dc1920a30db8a5ca4eeb55
-
SHA256
0a9dfb33e18c0a9eefff09279a8bee5fdaaf091a2758504a589e2024c777a608
-
SHA512
2f4b6ca8af60b44036e67e0c890bfc1484825bb60c0a8570f05fe41f8e13ae90ebcf1b0da4ce441548f428da4d6b60876b78956f6b814254fd704294af6b9811
-
SSDEEP
3072:+1/rsILCP7Riu2P4LbLLARDzTmYlsBazywfYug:+1sImP7iQLkRjTUsYr
Malware Config
Signatures
Files
-
WKR001.zip.zip
-
WKR001.ISO.iso
-
WKR001.EXE.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
WKR002.VBS