Static task
static1
Behavioral task
behavioral1
Sample
f570a57621db552526f7e6c092375efc8df2656c5203209b2ac8e06a198b8964.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f570a57621db552526f7e6c092375efc8df2656c5203209b2ac8e06a198b8964.exe
Resource
win10v2004-20221111-en
General
-
Target
8677416131.zip
-
Size
56KB
-
MD5
3ae406386936f82c12bcf1734923eab7
-
SHA1
1b0f1b1654c3d25206537e3b215f9f5a174c90da
-
SHA256
6c9c9214169acbad2421aa65145541fc2df9df06015b65f2488b329d57e262c1
-
SHA512
39e0c000ed118d2413f2f78f64f408dbddec623a59d24dea326f10458b3510a09d77a7261acec94d03d07550c1abc2db7235290005620cf21a21fe1a8e91797e
-
SSDEEP
1536:Nd/OfdPKVlspIUmnULzBKFleXZENFb1C0rx:NoBylYm0B2eXZSlx
Malware Config
Signatures
Files
-
8677416131.zip.zip
Password: infected
-
f570a57621db552526f7e6c092375efc8df2656c5203209b2ac8e06a198b8964.exe windows x86
6669bacf2da4e579f7d40262cec764cb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
shlwapi
wnsprintfA
Sections
.text Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ