Static task
static1
Behavioral task
behavioral1
Sample
f5e9af8a842e3d0ab3b48e83151a43a1514ed4f8772da1819d27558b62901b3b.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
f5e9af8a842e3d0ab3b48e83151a43a1514ed4f8772da1819d27558b62901b3b.exe
Resource
win10v2004-20230220-en
General
-
Target
f5e9af8a842e3d0ab3b48e83151a43a1514ed4f8772da1819d27558b62901b3b.zip
-
Size
470KB
-
MD5
d9f0f7b3e654be29deba3120eac66e5b
-
SHA1
4b71c898eb3affd1f15232ee5e9c79e6560dabab
-
SHA256
09e6fb6d40e80ed9ec9fa9e7a5ccb5b1ab3a394e5057c0eed89ba83079244133
-
SHA512
f9f857541c3b33e7759c4b8b513a928123efd45501a90db513020b3ea0d0d9dad4460cb5e44655db6cd776a2e68b82ef46a749c5d41689a333560e2d75e31e00
-
SSDEEP
12288:9eBIVGz7f7mv3fGu1xaI9FIDVjc2aygcS10vbqr:9dwfCxMQ+jce9u0vbqr
Malware Config
Signatures
Files
-
f5e9af8a842e3d0ab3b48e83151a43a1514ed4f8772da1819d27558b62901b3b.zip.zip
Password: infected
-
f5e9af8a842e3d0ab3b48e83151a43a1514ed4f8772da1819d27558b62901b3b.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 576KB - Virtual size: 575KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ