Static task
static1
Behavioral task
behavioral1
Sample
d5387c42e8059092e86b896c525002d61d173b85bdc4047f6fd4923ea90c7695.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
d5387c42e8059092e86b896c525002d61d173b85bdc4047f6fd4923ea90c7695.exe
Resource
win10v2004-20230221-en
General
-
Target
d5387c42e8059092e86b896c525002d61d173b85bdc4047f6fd4923ea90c7695.zip
-
Size
859KB
-
MD5
ad28b1d62c34648d9c04ffcecb9b2119
-
SHA1
354932768f0248ac0af132051eb5e6bea5d535c8
-
SHA256
1b68fc652b0bd1376820e9fff9143f1f0f09a3c707e7476339e6580aff450386
-
SHA512
f717e2afa20dde21e202ea755047536715d5280b93c1b34fd8b7b20c9c70da363112c3da559bbe8505b03862b023cb92da7574f849449b25d5b9ddee87b87ef6
-
SSDEEP
12288:31ggua4A+8F8tktk/NcCWQ9pNtF/V6bVc2hsM2Tc62Y2D4QB8ly5uPt4enYwZ3Ud:39uab8tktmuQtGxIMKp2EQUWYBrUXnN
Malware Config
Signatures
Files
-
d5387c42e8059092e86b896c525002d61d173b85bdc4047f6fd4923ea90c7695.zip.zip
Password: infected
-
d5387c42e8059092e86b896c525002d61d173b85bdc4047f6fd4923ea90c7695.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ