Static task
static1
Behavioral task
behavioral1
Sample
88b472dff56348cc6b3a7fbacdd7a935a259be05c24f72867f940e5dc108425a.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
88b472dff56348cc6b3a7fbacdd7a935a259be05c24f72867f940e5dc108425a.exe
Resource
win10v2004-20230220-en
General
-
Target
88b472dff56348cc6b3a7fbacdd7a935a259be05c24f72867f940e5dc108425a.zip
-
Size
64KB
-
MD5
9c5fe9b914329a1812f655b5887357e4
-
SHA1
3a37addd516753ed266da1903284f1b0a557f14a
-
SHA256
aeae373be239e3c8ff6fbd10c225e4ab386f1dd4eb39986852090f77edf89c24
-
SHA512
b3fd80040381ae4496f5cffc2c5f43aa61d7d94419db79c57a9374f0cfea5ba87eced4d2054db3dccae5fa21cbb23f6c4d7e0258c146e96f3715fa5518412e94
-
SSDEEP
1536:nDi7ipn9BAGhCDas6fx9/epqZUJn9JRNSNJcW54Yjm:Di7sn9BAGhCWvfxNepqZU19Jn7Wva
Malware Config
Signatures
Files
-
88b472dff56348cc6b3a7fbacdd7a935a259be05c24f72867f940e5dc108425a.zip.zip
Password: infected
-
88b472dff56348cc6b3a7fbacdd7a935a259be05c24f72867f940e5dc108425a.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ