Static task
static1
Behavioral task
behavioral1
Sample
a9c4951b7a08b44481723d7f8caab4102423d0075c31eac6763b47c3145b1932.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a9c4951b7a08b44481723d7f8caab4102423d0075c31eac6763b47c3145b1932.exe
Resource
win10v2004-20220812-en
General
-
Target
8587512799.zip
-
Size
523KB
-
MD5
b6c704c08f7923f416866f26e275e6a2
-
SHA1
7aadc425b28f723ac8f75093d6e8b4cf1c51ec21
-
SHA256
977bc8c978a48bca3340ca270a487b770e85a31659ae0fadc0ed66a78bf2a604
-
SHA512
211e68c780362284e4d3ed1cc30ebd8c3856c5a616641e6a231ad1de04d115ee7aff7248de50ac1e463164d7d107b52f4ebfabb65c1734a94ab3f2f08c8e7596
-
SSDEEP
12288:vJZVqvZo6a+kRIMs5ZRXlvjPeyV0G4z9dywoewb1H2bbNP:vXoZo6a+q+RxDX4z9dyBBWB
Malware Config
Signatures
Files
-
8587512799.zip.zip
Password: infected
-
a9c4951b7a08b44481723d7f8caab4102423d0075c31eac6763b47c3145b1932.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 594KB - Virtual size: 593KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ