Static task
static1
Behavioral task
behavioral1
Sample
d253e0e476a3a6eb4291335e23827d7f84d30501c0d00600a010fa6c147b14aa.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
d253e0e476a3a6eb4291335e23827d7f84d30501c0d00600a010fa6c147b14aa.exe
Resource
win10v2004-20230220-en
General
-
Target
d253e0e476a3a6eb4291335e23827d7f84d30501c0d00600a010fa6c147b14aa.zip
-
Size
2.2MB
-
MD5
6aa60abf22f44bda79ab8468e4d5d7d7
-
SHA1
7bb5d9edb9a676b5a23aece7ad7a46c3fda02fa5
-
SHA256
23d7dd604d8da65b2bcb6bce933e23f93ca10cd5d824ec2c7e9cf7bea61a5b09
-
SHA512
6546f457fcd0293cc908b8620da693bf0a252ea771b20143baa5f087e534ee68012d243c4d693af52963f5774e75e7358e52ee27f8a0554bfc944300da548978
-
SSDEEP
49152:P8bKJmQb95XTC+WLwbeRiEpXd1o4R849xMi/clLaS06Kd:P8bmX95XTCdSEpXvo4zTR
Malware Config
Signatures
Files
-
d253e0e476a3a6eb4291335e23827d7f84d30501c0d00600a010fa6c147b14aa.zip.zip
Password: infected
-
d253e0e476a3a6eb4291335e23827d7f84d30501c0d00600a010fa6c147b14aa.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5.4MB - Virtual size: 5.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ