Static task
static1
Behavioral task
behavioral1
Sample
6e6536cc12b95070cb1a9674a4aa2c86b961bb3f4be8cae578adaa91a76898e4.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
6e6536cc12b95070cb1a9674a4aa2c86b961bb3f4be8cae578adaa91a76898e4.exe
Resource
win10v2004-20230220-en
General
-
Target
6e6536cc12b95070cb1a9674a4aa2c86b961bb3f4be8cae578adaa91a76898e4.zip
-
Size
476KB
-
MD5
bf0ed30595cf7ae0c772c170fbef19a4
-
SHA1
135d86af5e37ab5747e64cabb15eb20f95528fcd
-
SHA256
4d2953bb8792f69bf6d23352cce9fd306e28b89702461843bc19321e2ffc3faa
-
SHA512
df896087fe97507afae0156d4e4a48c25d3448c934243a32a91f099f4539464b4a8e8c262e0206231cdaa5eb046dad63781369fe591f5c347777d92d4c6c5eb1
-
SSDEEP
12288:ZOD/6BsLpMlBY+pATUO0DCOBf4WADcIpx8J6tZc:ZOLy40DxgTx8J6tZc
Malware Config
Signatures
Files
-
6e6536cc12b95070cb1a9674a4aa2c86b961bb3f4be8cae578adaa91a76898e4.zip.zip
Password: infected
-
6e6536cc12b95070cb1a9674a4aa2c86b961bb3f4be8cae578adaa91a76898e4.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 506KB - Virtual size: 505KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ