Static task
static1
Behavioral task
behavioral1
Sample
ContinuedHere/ContinuedHere.exe
Resource
win7-20221111-en
2 signatures
150 seconds
General
-
Target
ContinuedHere.zip
-
Size
1.7MB
-
MD5
e0d802842dd04857f32864f854fe4cfa
-
SHA1
4423dd500049098e77a6b5964dbc4fb74b0e58ba
-
SHA256
c911f8fb2caa508c114df862d0e376b8f2e36b472f3d8b811747b0bd719c5eb4
-
SHA512
1e86083eb935c1b4ad39cd413b6b15b42fff88fa23da64128e81cd046adb23584adf4763db581847d67c09ae0337a446da16cb2afd9c95b99f6c6f5d7d4372f7
-
SSDEEP
24576:38D22VtiySRAgsA2Uxjaolxz/52zEzKzr0Wdb:38S2ZSRj52UxaIx2IzKzIWdb
Score
1/10
Malware Config
Signatures
Files
-
ContinuedHere.zip.zip
-
ContinuedHere/About/Windows.Data.TimeZones/Windows.Data.TimeZones.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.ar-SA.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.bg-BG.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.cs-CZ.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.da-DK.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.de-DE.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.el-GR.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.en-GB.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.en-US.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.es-ES.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.et-EE.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.fi-FI.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.fr-FR.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.he-IL.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.hr-HR.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.hu-HU.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.it-IT.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.ja-JP.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.ko-KR.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.lt-LT.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.lv-LV.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.nb-NO.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.nl-NL.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.pl-PL.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.pt-BR.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.pt-PT.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.ro-RO.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.ru-RU.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.sk-SK.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.sl-SI.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.sr-Latn-RS.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.sv-SE.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.th-TH.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.tr-TR.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.uk-UA.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.zh-CN.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.zh-HK.pri
-
ContinuedHere/About/Windows.Data.TimeZones/pris/Windows.Data.TimeZones.zh-TW.pri
-
ContinuedHere/ContinuedHere.exe.exe windows x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 388KB - Virtual size: 388KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 205KB - Virtual size: 205KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ