Static task
static1
Behavioral task
behavioral1
Sample
6fd84d8f93ed3a6b37c938b22ac46dbb81b3710fc4e612e78c275c2ce69af81b.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
6fd84d8f93ed3a6b37c938b22ac46dbb81b3710fc4e612e78c275c2ce69af81b.exe
Resource
win10v2004-20230221-en
General
-
Target
6fd84d8f93ed3a6b37c938b22ac46dbb81b3710fc4e612e78c275c2ce69af81b.zip
-
Size
1.2MB
-
MD5
ab387368c1ea9cbd3cf6861d55536d9d
-
SHA1
ff5c14f862e3c5167359e4838fd3a205745e4fbe
-
SHA256
31968639963fbda5e901e68c29898f0d2d70b8f66e27886a41f964d3f17c7ed3
-
SHA512
c56cf66154c7158cf49abf7f5e122dc06018798008ff4e3eb6372df6a2ed814a370bd097c442ad862e98f906fc79db8a4610e32dca290ed3f61c93ab3ec833d6
-
SSDEEP
24576:bBi1oRDjYlzOqZ0d6NM4EVFdfCKkUbTLvOMsx7WUiumrFOjUXE:bwoxjYQq2chSDbXvOsc4U
Malware Config
Signatures
Files
-
6fd84d8f93ed3a6b37c938b22ac46dbb81b3710fc4e612e78c275c2ce69af81b.zip.zip
Password: infected
-
6fd84d8f93ed3a6b37c938b22ac46dbb81b3710fc4e612e78c275c2ce69af81b.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ