Static task
static1
Behavioral task
behavioral1
Sample
Oem7F7.exe
Resource
win7-20220901-en
General
-
Target
MDE_File_Sample_ee82d4425ce1f6d5193822139a5f0abc8883cf38.zip
-
Size
846KB
-
MD5
82a3c473d8719bef5722f470af377925
-
SHA1
f8e387418e0b34c9a48f40247c4f1fa592822090
-
SHA256
a6c2b448c30f81ec5754878e99a687e7b9485c465b4983721e310f3a8d9f0d23
-
SHA512
c72395646c13d0a7dd8fd510506d2fe711c619e9a4af9189995be2e1937fbffd5df35dc227a39579d47851369d3a8008b907c10bb514e54d1f517a2d89abfc62
-
SSDEEP
12288:iWgAaZn0TFZ6fmE3vce8FeEq53gfdY6X6+tlVD+KnKPKU1nDBQ4OAV3xjvPXXWkQ:u/mIYPq5+a+tlhpnE11nDu4Hd23EI
Malware Config
Signatures
Files
-
MDE_File_Sample_ee82d4425ce1f6d5193822139a5f0abc8883cf38.zip.zip
Password: infected
-
Oem7F7.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
OEM0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
OEM1 Size: 804KB - Virtual size: 808KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE