Static task
static1
Behavioral task
behavioral1
Sample
Z10N Obfuscator.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Z10N Obfuscator.exe
Resource
win10v2004-20230220-en
General
-
Target
Z10N Obfuscator.exe
-
Size
1.2MB
-
MD5
e13828c8e3cfd718439e7150236bdbc0
-
SHA1
c941a177113ff5fb23e6c039d8a277031e29d46b
-
SHA256
88db56da576b9124ca10035d40be8852088e345b076151506045e704236685ab
-
SHA512
3515c890263c14be33bf25947570187c9b44e8ef289ecb8525f40d4ba21d68703fb9eacca57d249ab9fc16d61eebb3f04ca77ea426f4201acfedfb3aa300fabc
-
SSDEEP
6144:xyVF2smgHz4nFc/RKimdamJuHfS0v7QXKM9sdJHWmdemPmSF1UeLWM/9wk3DDSY:xb2/kimUmMHf9sK+sdJHWm0mu9ppiDD
Malware Config
Signatures
Files
-
Z10N Obfuscator.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 166KB - Virtual size: 165KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.=kK Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 403KB - Virtual size: 402KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ