Static task
static1
Behavioral task
behavioral1
Sample
238273a3d50b0c40415594d5aa508fb25f953c9de3c51daaece5fb32d59d8fea.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
238273a3d50b0c40415594d5aa508fb25f953c9de3c51daaece5fb32d59d8fea.exe
Resource
win10v2004-20230221-en
General
-
Target
238273a3d50b0c40415594d5aa508fb25f953c9de3c51daaece5fb32d59d8fea.zip
-
Size
212KB
-
MD5
a44d51c2123359d9b3d0c0a890fb0792
-
SHA1
c1b846aac916e9a484e67fee7741978723e94f23
-
SHA256
35618d806b3e3cf5b5ea94b0a512edc607eaabded930fffab4f3b1f9eac9b614
-
SHA512
e3bb9199a305c0fc5760cffa8597292c43e77e71259c4f2ca9bdcaaa65cb38a9376d41e5c2a151bc8aa7f17bf15b97b85f833755e914024316aa39d0421e5502
-
SSDEEP
6144:8H8WZuoYPtSYIQtrSn8YSPa9y8V1RFXbpwE:y8encmIenTaQy8HRFP
Malware Config
Signatures
Files
-
238273a3d50b0c40415594d5aa508fb25f953c9de3c51daaece5fb32d59d8fea.zip.zip
Password: infected
-
238273a3d50b0c40415594d5aa508fb25f953c9de3c51daaece5fb32d59d8fea.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ