Static task
static1
Behavioral task
behavioral1
Sample
dc3a94f3ad554ca0257ed2b724f9270920c978dfb112a806d07b5d98a400a5a5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dc3a94f3ad554ca0257ed2b724f9270920c978dfb112a806d07b5d98a400a5a5.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
dc3a94f3ad554ca0257ed2b724f9270920c978dfb112a806d07b5d98a400a5a5_dump_0x00400000.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
dc3a94f3ad554ca0257ed2b724f9270920c978dfb112a806d07b5d98a400a5a5_dump_0x00400000.exe
Resource
win10v2004-20220901-en
General
-
Target
dc3a94f3ad554ca0257ed2b724f9270920c978dfb112a806d07b5d98a400a5a5.zip
-
Size
145KB
-
MD5
1e9397edc7122d8790b9cb7a61836f41
-
SHA1
c09da7b0f0e11359c160166bcc0e8432a21844de
-
SHA256
4f1d763df711cda157646f152ff5cad23e55acd4256406143aaefd1e806990ca
-
SHA512
0ffe2d93dc0eede69f704b713f270c16eb12b73506f0af59e86c0737e09fc3be1d620adc7dc1ade1cedb0c59940f29a0c299038d325f0d01a2b9c0e973402d1d
-
SSDEEP
3072:/xNcy9BDeWRBowzDAKPzIr/ceHg+2ZUm47dK9Qrhs9bMFwwDUPMH4S3P:/xOQDn3XDVIzVHgvGhkirhdJDZ4OP
Malware Config
Signatures
Files
-
dc3a94f3ad554ca0257ed2b724f9270920c978dfb112a806d07b5d98a400a5a5.zip.zip
Password: infected
-
dc3a94f3ad554ca0257ed2b724f9270920c978dfb112a806d07b5d98a400a5a5.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
bx.nb Size: - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
x.xb Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
dc3a94f3ad554ca0257ed2b724f9270920c978dfb112a806d07b5d98a400a5a5_dump_0x00400000.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
bx.nb Size: - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
x.xb Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ