Static task
static1
Behavioral task
behavioral1
Sample
9b269029696ccce9b0c7ab6fc2c5ff395faa32341501a3f99fbbf3f9869b8078.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
9b269029696ccce9b0c7ab6fc2c5ff395faa32341501a3f99fbbf3f9869b8078.exe
Resource
win10v2004-20230220-en
General
-
Target
9b269029696ccce9b0c7ab6fc2c5ff395faa32341501a3f99fbbf3f9869b8078.zip
-
Size
1.8MB
-
MD5
5bdc3932882af64f0b714b71691d3d5d
-
SHA1
a52f703ed855f4c538253e5e96db51710c892f27
-
SHA256
0bd16175b266d00caa3698cc68531ad0b2f84ee5d8b0d229fe9d5e87af9a8b9c
-
SHA512
85a627a9e881869fe5fa31829c53c1146938450eb58ea6d4097165255d6d1966c0de884df30fe3d473ca68f95302df92380c29bda51f1ef94f07f353df2e8d0b
-
SSDEEP
49152:QwmMlvQ+s3DgupPUYsaVCJgDWFwL6XsPnoo6fLX4cK6bHctI2:LmmvQ3DlPUptA8MnodW6bqI2
Malware Config
Signatures
Files
-
9b269029696ccce9b0c7ab6fc2c5ff395faa32341501a3f99fbbf3f9869b8078.zip.zip
Password: infected
-
9b269029696ccce9b0c7ab6fc2c5ff395faa32341501a3f99fbbf3f9869b8078.exe.exe windows x64
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ