Static task
static1
Behavioral task
behavioral1
Sample
Agreement documents.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Agreement documents.exe
Resource
win10v2004-20230220-en
General
-
Target
Agreement documents.iso
-
Size
2.3MB
-
MD5
62f621d9e07dfa34ed414950c44801d4
-
SHA1
ea75e6cc34e62ee5f136e2f895b9adbc7b63fef8
-
SHA256
28f5fb6f5afd8932e3c365e3af55b56c9b4d0f964ecb4df5710305ce77d9b4b2
-
SHA512
0f3967eddbb00d79b71c7ce7b4d09d45c54143061735c951eb561ec45c7c123fb9e241d9791dfd0f7edc9affb7d1b6d17655e09b2664f615ea89332da360eadc
-
SSDEEP
24576:JX6ZYD2WTPUKtu1Dze6HDpLAq3di1mBHrmszBf8sM7BfkvkOkOyHVxxBIGkKY9aR:16ZYDEDzyEcFpPl3WIE
Malware Config
Signatures
Files
-
Agreement documents.iso.iso
-
Agreement documents.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ