Static task
static1
Behavioral task
behavioral1
Sample
e3caacd1abab8f9296ad6bcb0dc53698d27c1a19e7060af2188528d345e5093a.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
e3caacd1abab8f9296ad6bcb0dc53698d27c1a19e7060af2188528d345e5093a.exe
Resource
win10v2004-20230221-en
General
-
Target
e3caacd1abab8f9296ad6bcb0dc53698d27c1a19e7060af2188528d345e5093a.zip
-
Size
101KB
-
MD5
b6722273edb54eb405113d4cfff6d875
-
SHA1
e4e7fd615f770d284b25e29aa69fd0e283639b38
-
SHA256
68c21b2c7adfa7644fd8274ff4f37b7770f2fd6a195805db3f807932d5644401
-
SHA512
40cfdf0aec0f4ede4f2316c1d2b6027e42fb71dc581b47f9c45283fa48b136d274395cf09fe7585f25dc43d207d5d25603c034abd71ef441ec3c59a0868ef07f
-
SSDEEP
3072:F1Uc0TRMTp4vZo7TuTBSeP5e7JCVf75nOJvZuvQUDI:F1z+o+q7ylhxe7YtURII
Malware Config
Signatures
Files
-
e3caacd1abab8f9296ad6bcb0dc53698d27c1a19e7060af2188528d345e5093a.zip.zip
Password: infected
-
e3caacd1abab8f9296ad6bcb0dc53698d27c1a19e7060af2188528d345e5093a.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 410KB - Virtual size: 409KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ