Static task
static1
Behavioral task
behavioral1
Sample
6362084f61fa6a41b8b01b7c62215ad41a2623b69572ce558c33bffaa21f0af9.exe
Resource
win7-20230220-en
General
-
Target
6362084f61fa6a41b8b01b7c62215ad41a2623b69572ce558c33bffaa21f0af9.zip
-
Size
119KB
-
MD5
507310d73d80022ec346d7b9ab46ab69
-
SHA1
5af6d5cd74dcd48040adc48617c2d33d74f8d2f5
-
SHA256
bcecec0529dac24842b5e1a99d17ab9e231d43e3d95e101aecdb43831c877dc8
-
SHA512
1cad447f21d2445d4c589aecee970df29d57db011917b31e8213b661309e1a0b90615da2d6270babd93de90d229e7098d0f846144acd89787feb2c2fa395a2f0
-
SSDEEP
3072:EMDymaNJDyw0ONrUZkDwRCqhwlfVYkRuxZN5Hkock:fANljb6+DkCqhFEsBEpk
Malware Config
Signatures
Files
-
6362084f61fa6a41b8b01b7c62215ad41a2623b69572ce558c33bffaa21f0af9.zip.zip
Password: infected
-
6362084f61fa6a41b8b01b7c62215ad41a2623b69572ce558c33bffaa21f0af9.exe.exe windows x86
Password: infected
67a36dd1932b24ae6e480a39581ed178
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TrackMouseEvent
ExcludeUpdateRgn
gdi32
GetColorAdjustment
clusapi
GetClusterFromResource
kernel32
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SleepEx
FindNextVolumeMountPointW
QueryIdleProcessorCycleTime
Sleep
SetEndOfFile
LocalAlloc
GetModuleHandleW
RtlUnwind
TerminateProcess
GetCurrentProcess
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ