Static task
static1
Behavioral task
behavioral1
Sample
ed12b65c4ad6c7849a23e7e6f5b0cc6827af4dab8ff0eef24d78afd9f4bfec1b.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ed12b65c4ad6c7849a23e7e6f5b0cc6827af4dab8ff0eef24d78afd9f4bfec1b.exe
Resource
win10v2004-20230220-en
General
-
Target
ed12b65c4ad6c7849a23e7e6f5b0cc6827af4dab8ff0eef24d78afd9f4bfec1b.zip
-
Size
778KB
-
MD5
0a3de5b3ddd5e1e9efe1f030834be6ba
-
SHA1
4dc67e3671109cd5edcfe1760bf35653690509ec
-
SHA256
93cc717dde4d3c999100a6344273b14afb30246c5466ce23c3e467da20a6f817
-
SHA512
18412da368ecb078cda672c058ac625c48f55a3c91d3debc4b39435bb5f48c5b17f0e2c437fb48d7fef0670ffd181b93f3184d5d6b3e4ae25e25637d0129354c
-
SSDEEP
12288:/lq7UWhLyjsAfQdBjlA2RPK68LGsVx0leVqm71PfoE/uLbgREx5Y9dEY:NGnLyo/jBRPK65ETVqgPfoE/kgyeT
Malware Config
Signatures
Files
-
ed12b65c4ad6c7849a23e7e6f5b0cc6827af4dab8ff0eef24d78afd9f4bfec1b.zip.zip
Password: infected
-
ed12b65c4ad6c7849a23e7e6f5b0cc6827af4dab8ff0eef24d78afd9f4bfec1b.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 953KB - Virtual size: 953KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ