Static task
static1
Behavioral task
behavioral1
Sample
a77ca36f11de22e899aa57c96c8789dc2f59edabcefe865dfe0d1fc137336cb9.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a77ca36f11de22e899aa57c96c8789dc2f59edabcefe865dfe0d1fc137336cb9.exe
Resource
win10v2004-20230220-en
General
-
Target
a77ca36f11de22e899aa57c96c8789dc2f59edabcefe865dfe0d1fc137336cb9.zip
-
Size
6.0MB
-
MD5
f0c0f64034947b4ee6ad641cfffc42b2
-
SHA1
494e94a22799f1e25b19a29a75f0538d88ddecbe
-
SHA256
6b954088ca05c233c4753eab140e0e14af7235062f8d9092e78fe38ff7f87538
-
SHA512
a1e4bc685ac89177a2bbe318ecb64658046d015ac7134d8153f7398de6938cad2d42cdb74a82d64fbeae198a0b5b3d264406c3828392fc96f1c4821f1dd60ea1
-
SSDEEP
196608:TnoCOni+qmE2Aq9Gi5j3Y6ccxThEoM2Q8m3DUS5hVvKYq0un:zoCiVE2Xki3Y1cxTcAm3D3DViYRk
Malware Config
Signatures
Files
-
a77ca36f11de22e899aa57c96c8789dc2f59edabcefe865dfe0d1fc137336cb9.zip.zip
Password: infected
-
a77ca36f11de22e899aa57c96c8789dc2f59edabcefe865dfe0d1fc137336cb9.exe.exe windows x86
Password: infected
348773d00220e600aabe04ecb8803881
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
GetDC
gdi32
BitBlt
advapi32
CredFree
shell32
ShellExecuteA
crypt32
CryptUnprotectData
gdiplus
GdipFree
setupapi
SetupDiGetClassDevsA
wtsapi32
WTSSendMessageW
Sections
.MPRESS1 Size: 6.0MB - Virtual size: 12.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE