Static task
static1
Behavioral task
behavioral1
Sample
Zaplata,jpeg.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Zaplata,jpeg.exe
Resource
win10v2004-20221111-en
General
-
Target
poczta-zewnetrzna-fwd-zaplata.eml
-
Size
1.7MB
-
MD5
9fed6db7d3ab6ef86ff757346ec72409
-
SHA1
7cca6a35df2e3628b7ac4560120bba24f76146a6
-
SHA256
780b9a1d77f4988905240e753e3b35b92895a2920cb348d1e4c1b6b52ed4c029
-
SHA512
596f2a7c3c75251927665ee46afd3367b2f810c44b96899fdc67aa578b6708152048e1d0e423fe3dae1d8cae882573b8a561337522e268bccb1808d02c1f87db
-
SSDEEP
12288:UkV/uRBJzWjvJ55Xo5LJJasOY9meHQ89JU53KKlZrWtxKo4J/FqBgsVI9HGAecFu:UDB1kJ55AojAByIzaqBgsWMfcYL0D9Ho
Malware Config
Signatures
Files
-
poczta-zewnetrzna-fwd-zaplata.eml.eml
-
Zaplata.jpeg.img.iso
-
Zaplata,jpeg.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 676KB - Virtual size: 676KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
email-html-2.txt.html
-
email-plain-1.txt