Static task
static1
Behavioral task
behavioral1
Sample
419e48ea03812b9aed7024e095d46719cb512db43076fca7ab5064f1435f2830.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
419e48ea03812b9aed7024e095d46719cb512db43076fca7ab5064f1435f2830.exe
Resource
win10v2004-20230220-en
General
-
Target
clickspring3.zip
-
Size
89KB
-
MD5
0ee522fa7090e18d44c13594106cf55b
-
SHA1
f906e7bdb5dea95f8371a55f280a8a24e43f3fbe
-
SHA256
b2a92203d3c700badbb9a0bfa4e74cfbeb766ae337bab2dbb0b813ddf6f40305
-
SHA512
98eb5e161a4a0045b4563a4b61ddbcd93daeb0782c6fd91a419fdc21e4631548eba13af04fb3a80cc5307ebb7523e663fe97c7fec0ff9b4aa3b2978e3408de1c
-
SSDEEP
1536:0IbSF4PFwGbefAXx33R9EOrsVlwnePaRA/aY4TqmzrPMkdk0MPzw2/q/iG8:nW42GbuAzH9nePQYkzrPMkeFPG6G8
Malware Config
Signatures
Files
-
clickspring3.zip.zip
Password: infected
-
419e48ea03812b9aed7024e095d46719cb512db43076fca7ab5064f1435f2830.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 120KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE