Overview
overview
4Static
static
WindowsFor...m1.vbs
windows7-x64
1WindowsFor...m1.vbs
windows10-2004-x64
1WindowsFor...er.vbs
windows7-x64
1WindowsFor...er.vbs
windows10-2004-x64
1WindowsFor...es.vbs
windows7-x64
1WindowsFor...es.vbs
windows10-2004-x64
1WindowsFor...p1.exe
windows7-x64
1WindowsFor...p1.exe
windows10-2004-x64
1WindowsFor...p1.exe
windows7-x64
1WindowsFor...p1.exe
windows10-2004-x64
1WindowsFor...m1.vbs
windows7-x64
1WindowsFor...m1.vbs
windows10-2004-x64
1WindowsFor...er.vbs
windows7-x64
1WindowsFor...er.vbs
windows10-2004-x64
1WindowsFor...es.vbs
windows7-x64
1WindowsFor...es.vbs
windows10-2004-x64
1WindowsFor...p3.exe
windows7-x64
1WindowsFor...p3.exe
windows10-2004-x64
1WindowsFor...p3.exe
windows7-x64
1WindowsFor...p3.exe
windows10-2004-x64
1{...i.docx
windows7-x64
4{...i.docx
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
WindowsFormsApp1/WindowsFormsApp1/Form1.vbs
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
WindowsFormsApp1/WindowsFormsApp1/Form1.vbs
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
WindowsFormsApp1/WindowsFormsApp1/Properties/Resources.Designer.vbs
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
WindowsFormsApp1/WindowsFormsApp1/Properties/Resources.Designer.vbs
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
WindowsFormsApp1/WindowsFormsApp1/Properties/Resources.vbs
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
WindowsFormsApp1/WindowsFormsApp1/Properties/Resources.vbs
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
WindowsFormsApp1/WindowsFormsApp1/bin/Debug/WindowsFormsApp1.exe
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
WindowsFormsApp1/WindowsFormsApp1/bin/Debug/WindowsFormsApp1.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
WindowsFormsApp1/WindowsFormsApp1/obj/Debug/WindowsFormsApp1.exe
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
WindowsFormsApp1/WindowsFormsApp1/obj/Debug/WindowsFormsApp1.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral11
Sample
WindowsFormsApp3/WindowsFormsApp3/Form1.vbs
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
WindowsFormsApp3/WindowsFormsApp3/Form1.vbs
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
WindowsFormsApp3/WindowsFormsApp3/Properties/Resources.Designer.vbs
Resource
win7-20220901-en
Behavioral task
behavioral14
Sample
WindowsFormsApp3/WindowsFormsApp3/Properties/Resources.Designer.vbs
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
WindowsFormsApp3/WindowsFormsApp3/Properties/Resources.vbs
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
WindowsFormsApp3/WindowsFormsApp3/Properties/Resources.vbs
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
WindowsFormsApp3/WindowsFormsApp3/bin/Debug/WindowsFormsApp3.exe
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
WindowsFormsApp3/WindowsFormsApp3/bin/Debug/WindowsFormsApp3.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral19
Sample
WindowsFormsApp3/WindowsFormsApp3/obj/Debug/WindowsFormsApp3.exe
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
WindowsFormsApp3/WindowsFormsApp3/obj/Debug/WindowsFormsApp3.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
{]p-ѭi.docx
Resource
win7-20220812-en
Behavioral task
behavioral22
Sample
{]p-ѭi.docx
Resource
win10v2004-20220812-en
General
-
Target
3557074bfe76e3a62d93e5fdc54097204bf7d3e58aabbcaf36078ec4e6673e8a
-
Size
204KB
-
MD5
3890b0c57c6f1c9d8724ff8417fbecef
-
SHA1
6efd4782dfe3bda8d4e9457e3903fb0e02b6ef9e
-
SHA256
3557074bfe76e3a62d93e5fdc54097204bf7d3e58aabbcaf36078ec4e6673e8a
-
SHA512
68ada5c2f3ba70b23874c4d04c9056053749c9b95f7955b744004fc1e175de7895731be7b88ff23ef1d3a48443f9b17eba5a11253eb6725739d37dc8d2bd0a1b
-
SSDEEP
3072:zweyeoe11C0VeY+NeVe2+geBezexeBdMdM9McMiMHM+MeM+7M+4mM0MsjMAMB0M7:T1CPKFhntRndbFT/cTy7Er5rugqNMO
Malware Config
Signatures
Files
-
3557074bfe76e3a62d93e5fdc54097204bf7d3e58aabbcaf36078ec4e6673e8a.zip
-
WindowsFormsApp1/.vs/WindowsFormsApp1/FileContentIndex/94efd066-8074-4ab7-bcf7-736d6146a93a.vsidx
-
WindowsFormsApp1/.vs/WindowsFormsApp1/FileContentIndex/952c82d9-2082-431b-a5c0-80b0c4c23c12.vsidx
-
WindowsFormsApp1/.vs/WindowsFormsApp1/FileContentIndex/b8c8145e-2652-424a-8c97-eb7e540324a7.vsidx
-
WindowsFormsApp1/.vs/WindowsFormsApp1/FileContentIndex/efe1a050-94fc-4cd0-8912-447b2fba0cbd.vsidx
-
WindowsFormsApp1/.vs/WindowsFormsApp1/v17/.suo
-
WindowsFormsApp1/WindowsFormsApp1.sln
-
WindowsFormsApp1/WindowsFormsApp1/App.config
-
WindowsFormsApp1/WindowsFormsApp1/Form1.Designer.cs
-
WindowsFormsApp1/WindowsFormsApp1/Form1.cs
-
WindowsFormsApp1/WindowsFormsApp1/Form1.resx.vbs
-
WindowsFormsApp1/WindowsFormsApp1/Program.cs
-
WindowsFormsApp1/WindowsFormsApp1/Properties/AssemblyInfo.cs
-
WindowsFormsApp1/WindowsFormsApp1/Properties/Resources.Designer.cs.vbs
-
WindowsFormsApp1/WindowsFormsApp1/Properties/Resources.resx.vbs
-
WindowsFormsApp1/WindowsFormsApp1/Properties/Settings.Designer.cs
-
WindowsFormsApp1/WindowsFormsApp1/Properties/Settings.settings
-
WindowsFormsApp1/WindowsFormsApp1/WindowsFormsApp1.csproj
-
WindowsFormsApp1/WindowsFormsApp1/bin/Debug/WindowsFormsApp1.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
WindowsFormsApp1/WindowsFormsApp1/bin/Debug/WindowsFormsApp1.exe.config
-
WindowsFormsApp1/WindowsFormsApp1/bin/Debug/WindowsFormsApp1.pdb
-
WindowsFormsApp1/WindowsFormsApp1/obj/Debug/.NETFramework,Version=v4.7.2.AssemblyAttributes.cs
-
WindowsFormsApp1/WindowsFormsApp1/obj/Debug/DesignTimeResolveAssemblyReferences.cache
-
WindowsFormsApp1/WindowsFormsApp1/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
-
WindowsFormsApp1/WindowsFormsApp1/obj/Debug/WindowsFormsApp1.Form1.resources
-
WindowsFormsApp1/WindowsFormsApp1/obj/Debug/WindowsFormsApp1.Properties.Resources.resources
-
WindowsFormsApp1/WindowsFormsApp1/obj/Debug/WindowsFormsApp1.csproj.AssemblyReference.cache
-
WindowsFormsApp1/WindowsFormsApp1/obj/Debug/WindowsFormsApp1.csproj.CoreCompileInputs.cache
-
WindowsFormsApp1/WindowsFormsApp1/obj/Debug/WindowsFormsApp1.csproj.FileListAbsolute.txt
-
WindowsFormsApp1/WindowsFormsApp1/obj/Debug/WindowsFormsApp1.csproj.GenerateResource.cache
-
WindowsFormsApp1/WindowsFormsApp1/obj/Debug/WindowsFormsApp1.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
WindowsFormsApp1/WindowsFormsApp1/obj/Debug/WindowsFormsApp1.pdb
-
WindowsFormsApp3/.vs/WindowsFormsApp3/FileContentIndex/38497e85-4b54-4ed8-8fc5-b5541010b9b3.vsidx
-
WindowsFormsApp3/.vs/WindowsFormsApp3/v17/.suo
-
WindowsFormsApp3/WindowsFormsApp3.sln
-
WindowsFormsApp3/WindowsFormsApp3/App.config
-
WindowsFormsApp3/WindowsFormsApp3/Form1.Designer.cs
-
WindowsFormsApp3/WindowsFormsApp3/Form1.cs
-
WindowsFormsApp3/WindowsFormsApp3/Form1.resx.vbs
-
WindowsFormsApp3/WindowsFormsApp3/Program.cs
-
WindowsFormsApp3/WindowsFormsApp3/Properties/AssemblyInfo.cs
-
WindowsFormsApp3/WindowsFormsApp3/Properties/Resources.Designer.cs.vbs
-
WindowsFormsApp3/WindowsFormsApp3/Properties/Resources.resx.vbs
-
WindowsFormsApp3/WindowsFormsApp3/Properties/Settings.Designer.cs
-
WindowsFormsApp3/WindowsFormsApp3/Properties/Settings.settings
-
WindowsFormsApp3/WindowsFormsApp3/WindowsFormsApp3.csproj
-
WindowsFormsApp3/WindowsFormsApp3/bin/Debug/WindowsFormsApp3.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
WindowsFormsApp3/WindowsFormsApp3/bin/Debug/WindowsFormsApp3.exe.config
-
WindowsFormsApp3/WindowsFormsApp3/bin/Debug/WindowsFormsApp3.pdb
-
WindowsFormsApp3/WindowsFormsApp3/obj/Debug/.NETFramework,Version=v4.7.2.AssemblyAttributes.cs
-
WindowsFormsApp3/WindowsFormsApp3/obj/Debug/DesignTimeResolveAssemblyReferences.cache
-
WindowsFormsApp3/WindowsFormsApp3/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
-
WindowsFormsApp3/WindowsFormsApp3/obj/Debug/WindowsFormsApp3.Form1.resources
-
WindowsFormsApp3/WindowsFormsApp3/obj/Debug/WindowsFormsApp3.Properties.Resources.resources
-
WindowsFormsApp3/WindowsFormsApp3/obj/Debug/WindowsFormsApp3.csproj.AssemblyReference.cache
-
WindowsFormsApp3/WindowsFormsApp3/obj/Debug/WindowsFormsApp3.csproj.CoreCompileInputs.cache
-
WindowsFormsApp3/WindowsFormsApp3/obj/Debug/WindowsFormsApp3.csproj.FileListAbsolute.txt
-
WindowsFormsApp3/WindowsFormsApp3/obj/Debug/WindowsFormsApp3.csproj.GenerateResource.cache
-
WindowsFormsApp3/WindowsFormsApp3/obj/Debug/WindowsFormsApp3.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
WindowsFormsApp3/WindowsFormsApp3/obj/Debug/WindowsFormsApp3.pdb
-
{]p-ѭi.docx.docx office2007