Static task
static1
Behavioral task
behavioral1
Sample
51ffe0c7a6dfc7dd135d32ccbf896d4943a62400fcf75d3504acb4232fa9a87e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
51ffe0c7a6dfc7dd135d32ccbf896d4943a62400fcf75d3504acb4232fa9a87e.exe
Resource
win10v2004-20220812-en
General
-
Target
8690028382.zip
-
Size
407KB
-
MD5
6ddfda6bf5acc200436e6b8feef10898
-
SHA1
bd0de789bd9b65d40f3adaa9f48e188be1a7d163
-
SHA256
e47e34c676a5e1cb48b7c7a14e80d94664619dd70c30097e93f43beb53d2186a
-
SHA512
bf6464d0ae2568769e63727e73a93c3c4ff96e5ff09d80c1b3d579bed4766bde4c8d59f03b7476a9af50bb2b515e8e8d5b9a178ded4127719b3d727b2d76e6f7
-
SSDEEP
12288:zTUWZLQoi5fAUZHNTLQod0jazI2bdLO8D:3UYLQoilBNvQ40jL2VOM
Malware Config
Signatures
Files
-
8690028382.zip.zip
Password: infected
-
51ffe0c7a6dfc7dd135d32ccbf896d4943a62400fcf75d3504acb4232fa9a87e.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 538KB - Virtual size: 537KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ