Static task
static1
Behavioral task
behavioral1
Sample
949d00495bd796de4f53cad348b8908e65f3cf92ccaeec90b165988ef0517bbb.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
949d00495bd796de4f53cad348b8908e65f3cf92ccaeec90b165988ef0517bbb.exe
Resource
win10v2004-20230221-en
General
-
Target
949d00495bd796de4f53cad348b8908e65f3cf92ccaeec90b165988ef0517bbb.zip
-
Size
350KB
-
MD5
fa6c5f35d164deb421e09b9e29360d60
-
SHA1
3f03e96f74b6d5a5c25c8e79e2f0ecebbb46caac
-
SHA256
02f8ac51c29b6a4102a2b8c946681af4ddd0a4a8c17ceb78c9ca1115c48e9c65
-
SHA512
de1a5d2ffda90e49dede20d21b6f70b7d61bce265df775e7c54172956e96a4e6e326ddffebea98afc20a5d139a64e762c5b60103798af5813a8d666266f08e26
-
SSDEEP
6144:wpqIEEXkvZwPanjmp+W5wCHpm5bAfkapwwVZFLOLmeF55NzBGYWUBvt2Qv3gZjY+:W/EEEmPannWeCHQliksBlLO59JBEmvts
Malware Config
Signatures
Files
-
949d00495bd796de4f53cad348b8908e65f3cf92ccaeec90b165988ef0517bbb.zip.zip
Password: infected
-
949d00495bd796de4f53cad348b8908e65f3cf92ccaeec90b165988ef0517bbb.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 708KB - Virtual size: 707KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ