Static task
static1
Behavioral task
behavioral1
Sample
Formal Bill..exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Formal Bill..exe
Resource
win10v2004-20220812-en
General
-
Target
5fe8ffc59521d84cc04a6e138b0426b11ca5b836f840034c4c095b76714a8547.zip
-
Size
565KB
-
MD5
2f73d754d35a858b09167ebab3fd42eb
-
SHA1
81122dd7e37a0ab7d6db520656c09952745903f5
-
SHA256
e63e976f7b27f2a201037c03dd4c6f96a64e3196fe256bacc2638d842475310b
-
SHA512
e49639a707c8009b80f66016d7949a4effa98c12486c88846e01e47be30fbc0daaf6c5bc38151f1fe7a70ca57ee3d612c06c5afea7db613ff7112081917e8659
-
SSDEEP
12288:IqpThgAtrV6Stkq6E3D+1bHBjwva96WPcSpenmp4:NtrCSi12vJFSpenM4
Malware Config
Signatures
Files
-
5fe8ffc59521d84cc04a6e138b0426b11ca5b836f840034c4c095b76714a8547.zip.zip
Password: infected
-
5fe8ffc59521d84cc04a6e138b0426b11ca5b836f840034c4c095b76714a8547.iso.iso
Password: infected
-
Formal Bill..exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 665KB - Virtual size: 665KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ