Static task
static1
Behavioral task
behavioral1
Sample
5af5401f756753bebec40c1402266d31cb16c3831cb3e9e4fe7f8562adadeee7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5af5401f756753bebec40c1402266d31cb16c3831cb3e9e4fe7f8562adadeee7.exe
Resource
win10v2004-20220812-en
General
-
Target
5af5401f756753bebec40c1402266d31cb16c3831cb3e9e4fe7f8562adadeee7.zip
-
Size
53KB
-
MD5
ea5e82760186813f2c6a502f53378e62
-
SHA1
63ae0b9f29bd80f33d71791be5b5c3ea8a038987
-
SHA256
afbc6477b4b081e66693e3fdf33e0dd5577b98e1908011077d228e4cd36e20b5
-
SHA512
1fbeea82a3f7f0cc83de91e53d4a2cbaf52fff5b166565d18392a90fc2c7104e3651432e99ffcbbe98653c5d686e8989f1bfc5ac67b14306ef3e06ee96c206fb
-
SSDEEP
1536:Z1KEWD+1OOtzW29BGYP9MnnhuLY2AcKDoA802:aEWDadtK29BDQl7n2
Malware Config
Signatures
Files
-
5af5401f756753bebec40c1402266d31cb16c3831cb3e9e4fe7f8562adadeee7.zip.zip
Password: infected
-
5af5401f756753bebec40c1402266d31cb16c3831cb3e9e4fe7f8562adadeee7.exe windows x86
Password: infected
6669bacf2da4e579f7d40262cec764cb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
shlwapi
wnsprintfA
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ