Static task
static1
Behavioral task
behavioral1
Sample
0YiZbG4343JpgchI1Xjradafwe.exe
Resource
win7-20230220-es
General
-
Target
0YiZbG4343JpgchI1Xjradafwe.zip
-
Size
658KB
-
MD5
95060b91dbe1fce2250e34779b06f1cb
-
SHA1
6614ff51fbe09dbd6bce7bb7b9240fc34a1af21e
-
SHA256
379b520017f8d847899f5624338300a81d8cc853240a744b41cfceb16b2b39a7
-
SHA512
84562061bdc86d2492e1292af6a9241e4ef1d0f32858f88a921b6290af82b8d692a0c2d6ac7b78c5c3e6e8b730a83377143864760d5d08bcf0bf18da313e02c0
-
SSDEEP
12288:sPrzc21/QnesEa5qkddw2/svBA6Q/AOJS7lJxIHHgtyG3d7KYQN8QH9q20DDh+A+:2rzrww2/sva5YqS7lIHAIG3duYZc9l0E
Malware Config
Signatures
Files
-
0YiZbG4343JpgchI1Xjradafwe.zip.rar
Password: 87636017211
-
0YiZbG4343JpgchI1Xjradafwe.exe.exe windows x86
Password: 87636017211
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 737KB - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ