Static task
static1
Behavioral task
behavioral1
Sample
871c16f98d57e29d0bda47336867e927fac570af087a258a3b5fdc502e6632a8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
871c16f98d57e29d0bda47336867e927fac570af087a258a3b5fdc502e6632a8.exe
Resource
win10v2004-20220812-en
General
-
Target
9183188391.zip
-
Size
535KB
-
MD5
bfbb0cb878fb5a9d336d26346ec3a081
-
SHA1
81245053e1029fa4e6b3e92873fdaaf9c544dbdb
-
SHA256
2eb8711a2b559a0da897f7a679015a02d4da878b58b7e2001333d25f5958359d
-
SHA512
fa102eab275dc6cbd4dcfdd3f512c56db627278cd6b96cb5e629220360d80e59c0582f5e3676753563ad31dee45acf71a3401eda8eca1dcd4b02e2e468054715
-
SSDEEP
12288:IVdWEi+OJSanUqKLtg50U9COgh7vggJkTKShi1KdGPoWW:3nJJSAU9pgeUw7vZkbhDdGPK
Malware Config
Signatures
Files
-
9183188391.zip.zip
Password: infected
-
871c16f98d57e29d0bda47336867e927fac570af087a258a3b5fdc502e6632a8.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 578KB - Virtual size: 578KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ