Static task
static1
Behavioral task
behavioral1
Sample
2b462e8b883b905e1a03d4c621555e58e33fe8f0b6f483c12190b3cb80d52aa1.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2b462e8b883b905e1a03d4c621555e58e33fe8f0b6f483c12190b3cb80d52aa1.exe
Resource
win10v2004-20230220-en
General
-
Target
2b462e8b883b905e1a03d4c621555e58e33fe8f0b6f483c12190b3cb80d52aa1.zip
-
Size
4.3MB
-
MD5
3e1bddf57073b1ab7d8e1c2040d5f954
-
SHA1
9663e24e19fb424b26c1389cf628997f3732772f
-
SHA256
87e5a733f5ea34205c51ebc12392f6ce8d7227cbf0becad390dff8cb40126f92
-
SHA512
ff28a61dece44ea8e22956cf9d9a78a57e632a5edbcdde011c2f60396e185a80ee0b37e706cbc2c7ae9d2b1cdf9029802669c2318960b635ac74320a88dfa27a
-
SSDEEP
98304:vASpp56gZSY3I+ULlYnCM4QhKpixWH1pXNwSSU:vzb5tkYZvnh0ixWVklU
Malware Config
Signatures
Files
-
2b462e8b883b905e1a03d4c621555e58e33fe8f0b6f483c12190b3cb80d52aa1.zip.zip
Password: infected
-
2b462e8b883b905e1a03d4c621555e58e33fe8f0b6f483c12190b3cb80d52aa1.exe.exe windows x64
Password: infected
d60779e750e6d3d18d009b2a2eadaba4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetModuleHandleA
advapi32
RegisterEventSourceA
shell32
PathMakeUniqueName
user32
RegisterClassExW
Sections
.reloc Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pexe Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 626KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: - Virtual size: 4B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 282KB - Virtual size: 281KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE