Static task
static1
Behavioral task
behavioral1
Sample
DOCX_Z0009737168245107.exe
Resource
win7-20230220-en
General
-
Target
DOCX_Z0009737168245107.tar
-
Size
847KB
-
MD5
87c739d2045bc02ed5f7ed8a9f5a5148
-
SHA1
88c4659c60d6dc5ad60ad06c15eac44756d572b0
-
SHA256
fdb73818a14ef1a8579cc2f7b88b5c79756da4110b75e91d4fac2602e533168e
-
SHA512
6ec45c31b6b33cefe349c7ef67e77eae3a152d198f4c215e724eff1e43001bfa0383dcc04054f539190d466abf57f12082fd688af7c290c26e8f26acf0efbd99
-
SSDEEP
24576:yOeA9ouAq9fHXk7op0W/PLxXqaMD+WhYTeS/:VAq9fXkkp0ePtaaBW0eW
Malware Config
Signatures
Files
-
DOCX_Z0009737168245107.tar.rar
Password: 6233
-
DOCX_Z0009737168245107.exe.exe windows x86
Password: 6233
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 564KB - Virtual size: 563KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 187KB - Virtual size: 187KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ