Static task
static1
Behavioral task
behavioral1
Sample
Leaflets & Company Profile_Doc.scr
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Leaflets & Company Profile_Doc.scr
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
QUOTATION_220377FIBA00541_PDF.scr
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
QUOTATION_220377FIBA00541_PDF.scr
Resource
win10v2004-20230220-en
General
-
Target
9474328037.zip
-
Size
65KB
-
MD5
2b4622f7c095dc5a859d01fa7489a666
-
SHA1
3e946ec6d8a97c1f3ac83ca68eb54ffc6c6c088a
-
SHA256
6a2b149dbd95ee2a39efbd2e517eb8f6abee54caa45ea2bf82d8f32fa5125341
-
SHA512
aba245f2a3cd03039d799c46e0919b14e7ed32f02bfee3b1d63b18a31db7993714296dd82d0817dbc6732efc591bcdfe9b5def34c95e70a5630738aa458841ad
-
SSDEEP
1536:DcNW3hKyttV2h1XqUaGKP9d7T4fPl7PUqXWzPLaG+SdAwf6:DvIiV2/5JKDnmlzKHaGIwC
Malware Config
Signatures
Files
-
9474328037.zip.zip
Password: infected
-
3b64d1825e233d162676455659367b6a6406398786156510d432308afb617683.7z
-
Leaflets & Company Profile_Doc.scr.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
QUOTATION_220377FIBA00541_PDF.scr.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ