Static task
static1
Behavioral task
behavioral1
Sample
5fc747d77faaedb0459b4e9fb8dbef1912f6fa91ad088a3ec016c749ecd83022.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
5fc747d77faaedb0459b4e9fb8dbef1912f6fa91ad088a3ec016c749ecd83022.exe
Resource
win10v2004-20230220-en
General
-
Target
5fc747d77faaedb0459b4e9fb8dbef1912f6fa91ad088a3ec016c749ecd83022.zip
-
Size
818KB
-
MD5
b037935cbab94fd26763d168d3bdb27d
-
SHA1
7ea2fbbb4f4be8543b0de254fbeee2c22d581241
-
SHA256
052a46b66971e06865e03f89f85eed83a935aadfdf757e9f99f1722e0e475613
-
SHA512
1b3eda268ccfa01749a38005db7dfd393a00cfc329409736cd7b185720b82c4fb7fc837a13fbc6e0fb63044a5c67d21757b2b95f22105dace8a468a3e2e4e39e
-
SSDEEP
12288:slib/Q9al5KzIX/4ln0cjfO3q9v7bpuGb0DUMYrBFi1dO7tnwYOf5hZw+h6BwWjd:ZjQ9KszIXIZP0gMUp7tFOXq+oSW8id
Malware Config
Signatures
Files
-
5fc747d77faaedb0459b4e9fb8dbef1912f6fa91ad088a3ec016c749ecd83022.zip.zip
Password: infected
-
5fc747d77faaedb0459b4e9fb8dbef1912f6fa91ad088a3ec016c749ecd83022.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ