Static task
static1
Behavioral task
behavioral1
Sample
cf64d94843b984530750f92cb194db3c93e5c9be37630d3eb480ca025bfcb883.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
cf64d94843b984530750f92cb194db3c93e5c9be37630d3eb480ca025bfcb883.exe
Resource
win10v2004-20230220-en
General
-
Target
cf64d94843b984530750f92cb194db3c93e5c9be37630d3eb480ca025bfcb883.zip
-
Size
2.5MB
-
MD5
ea30610bb2ce4379ca2680ff02680eba
-
SHA1
8b5195e566464911bab1ebd349e3250ee6faab10
-
SHA256
1e9b18c250bf347ec33d37e7794a5f6cb2ede17ceb61887e09a0cab5ebf5c7f3
-
SHA512
1f5f88e116a61948b51a332ad2bee01368eccb836c9e47ce5ada26224bb8182c185c059d1b2881a98a6942e46d820f2a915d5c85bef1926302c7784d55acef49
-
SSDEEP
49152:3R69h4AnafNVcGZYATnfasmOyADPHw9rwMGkWQyZrwk:g6AkNiQYAzowHw9wWWQ8wk
Malware Config
Signatures
Files
-
cf64d94843b984530750f92cb194db3c93e5c9be37630d3eb480ca025bfcb883.zip.zip
Password: infected
-
cf64d94843b984530750f92cb194db3c93e5c9be37630d3eb480ca025bfcb883.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ