Static task
static1
Behavioral task
behavioral1
Sample
SFT098-434 COA.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
SFT098-434 COA.exe
Resource
win10v2004-20220812-en
General
-
Target
SFT098-434 COA.rar
-
Size
652KB
-
MD5
e7a91dbb9d73acf1ae8c4afc6de9935d
-
SHA1
850f376ff9662ccce6e06147a30ee7a0f539103e
-
SHA256
6eeef42e918ab4d8f397fb2f5d76f5dde61cad084fa0a3b905a484edf0867b93
-
SHA512
0a40cec6cb8397c67f3b3470fb292f6c16249c61a703be6c47ce9b741d351caab4447444189f7dc5aeb9c4ca6070941eccaad84aa36fb980e211286dfa6bc093
-
SSDEEP
12288:s8Kw2mfV92wqcxRUoX944AOTc8wSCe/Q1Wu556Cl2JH6BOPqLGM06fDq0NP2RRX:DomjJrX44RBTCee96hJH6B6O906fP8x
Malware Config
Signatures
Files
-
SFT098-434 COA.rar.rar
-
SFT098-434 COA.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 852KB - Virtual size: 851KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ