Static task
static1
Behavioral task
behavioral1
Sample
Device/HarddiskVolume3/Users/lhall/AppData/Local/Temp/tmpF921.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Device/HarddiskVolume3/Users/lhall/AppData/Local/Temp/tmpF921.exe
Resource
win10v2004-20220901-en
General
-
Target
EAHC-MED113_2023-01-12_09_26_04.zip
-
Size
2KB
-
MD5
9dae1b3993e27cefedff6ae96eda1123
-
SHA1
4a421339352c3e6a71167f4ef844607d1eade131
-
SHA256
9c69675c41a0e29ae83475b5554f269ce95b0d354e8f77ea995581199388520d
-
SHA512
bba9b767cd6bf49b5dd78e6092a86ae633027264813a20a6d28b9624ac88794a5e38ee80f2d54e9b979ffccb909039d6ce3593669d1daac1d41ce39c01e28bda
Malware Config
Signatures
Files
-
EAHC-MED113_2023-01-12_09_26_04.zip.zip
Password: cwsoc@2022
-
Device/HarddiskVolume3/Users/lhall/AppData/Local/Temp/tmpF921.tmp.exe windows x86
Password: cwsoc@2022
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
manifest.json