Static task
static1
Behavioral task
behavioral1
Sample
f612e06403e19aab32db50beb92fcd9ac362e9c448ff13d00731355731b78c65.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
f612e06403e19aab32db50beb92fcd9ac362e9c448ff13d00731355731b78c65.exe
Resource
win10v2004-20230220-en
General
-
Target
f612e06403e19aab32db50beb92fcd9ac362e9c448ff13d00731355731b78c65.zip
-
Size
641KB
-
MD5
d1d9854cd0179ab6e7f4a7df81c58d14
-
SHA1
28c780c4070b394b2c8e02bca2d2ec73cbb73268
-
SHA256
6b495d2abffa72760a57cddfc7d6d88f915b8eb9ee28edec2faba658b7de2c72
-
SHA512
5b52a2dc364ac79b22d42a49c3dd450c03778293537c418c07b50d020652e55e208e8770010e82c7656369cc385b5af4d57f29630369b9a92f6934e6309a7051
-
SSDEEP
12288:5aAfUDWRNbKREL5lkbwEFSHgXlWmreMLpDJzT31Siy4jvKu9qbF10Ffnu:QAfRpLkV0HgXln/PzTFSiy4jB9qbUW
Malware Config
Signatures
Files
-
f612e06403e19aab32db50beb92fcd9ac362e9c448ff13d00731355731b78c65.zip.zip
Password: infected
-
f612e06403e19aab32db50beb92fcd9ac362e9c448ff13d00731355731b78c65.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 753KB - Virtual size: 753KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ