Static task
static1
Behavioral task
behavioral1
Sample
NZ-Y-Y-Z_se.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
NZ-Y-Y-Z_se.exe
Resource
win10v2004-20221111-en
General
-
Target
70fd45f86eca2c8914fc6c64828133f7b83bb4a2751378b6bffa81889cdcb6ba
-
Size
1.7MB
-
MD5
8718b4c344cc36a75bc3c6d7d524b9c5
-
SHA1
db1a0d44f5c4e307891293b89ac8fc7a7c1910f0
-
SHA256
70fd45f86eca2c8914fc6c64828133f7b83bb4a2751378b6bffa81889cdcb6ba
-
SHA512
9c4cbc3432e0d3b5a6f974d27be04936d5a0fb71b203c7959317bb006cec9d466d4f62773ac49dc90e930c17c996c9eb993222a6368614a4fe2add0683f743a9
-
SSDEEP
49152:O0xmIldBahf9sBRHKrDnWP/9hg1qFHWDYRJ:O1IXBahVsXgQ/gYAYb
Malware Config
Signatures
Files
-
70fd45f86eca2c8914fc6c64828133f7b83bb4a2751378b6bffa81889cdcb6ba.rar
-
NZ-Y-Y-Z_se.exe.exe windows x86
4f7114977a93cc776ea975288a785873
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
kernel32
GetSystemTime
user32
LoadImageA
gdi32
PatBlt
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
DragQueryFileA
ole32
CLSIDFromProgID
oleaut32
VariantChangeType
comctl32
ImageList_GetIcon
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 660KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ