Static task
static1
Behavioral task
behavioral1
Sample
gsPzUI8EV8RoSMt.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
gsPzUI8EV8RoSMt.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
gsPzUI8EV8RoSMt/gsPzUI8EV8RoSMt.exe
Resource
win7-20230220-en
General
-
Target
documents.pdf.7z
-
Size
1.8MB
-
MD5
68702d170c2a1b1f54709c56c4a317d6
-
SHA1
a1fe3931c9148fb26bb3b006f2d269f946dbcea7
-
SHA256
fa1e8326e5d55dacd4542efd308dea49bf73572c7b9068ffe062492408587ebb
-
SHA512
0953294ad367086afb2bf6a2a15e4dad5bb83903e009b576260f2d7d75b72f2891103d1764ca8431c6c6e24fdc3444f82549e8e4971620cb0812979c0aa725dc
-
SSDEEP
49152:R7kw+AV6yKmCr8nMiSbh7kw+AV6yKmCr8nMiSbm:R7khAo1YfSF7khAo1YfS6
Malware Config
Signatures
Files
-
documents.pdf.7z.zip
-
gsPzUI8EV8RoSMt/Doc___________ [[-Email-]].7z.zip
-
gsPzUI8EV8RoSMt.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 955KB - Virtual size: 955KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
gsPzUI8EV8RoSMt/gsPzUI8EV8RoSMt.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 955KB - Virtual size: 955KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ