Static task
static1
Behavioral task
behavioral1
Sample
procurement specification.exe
Resource
win7-20230220-en
General
-
Target
e15c7f86cbb087a6129491c7cdbd8406.bin
-
Size
443KB
-
MD5
7d82d89c8fe1c9fa7bbaf0a2efce2e5e
-
SHA1
50feb5339b376e306092d7171d1437891ac51ee8
-
SHA256
d660d7bfa64b73d9925e713389deeabf82add31479315766318956287ae3a483
-
SHA512
e935aaa9677503aab4d932a891195dfab9792204df5dd874155b13b4931a8014dcd363724e2292fc5df0b03b24294e85a67e56a82748e2a5f23e284c7cafd3bd
-
SSDEEP
12288:fZBREJ1Q7ejNYYKajljNySkK7tqP8p8Z8K12wk:fZseBYKmX70PGU8Krk
Malware Config
Signatures
Files
-
e15c7f86cbb087a6129491c7cdbd8406.bin.zip
Password: infected
-
aa31d811eea39e38cb3471bab82f4a0b2de3073f7a701ff0c1b0910e5a0b29d9.jar.zip
Password: infected
-
procurement specification.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ