Static task
static1
Behavioral task
behavioral1
Sample
Scan Doc.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Scan Doc.exe
Resource
win10v2004-20230220-en
General
-
Target
Scan Doc.img
-
Size
1.9MB
-
MD5
b01dfb4ec16c0c11cc92994ca003d923
-
SHA1
6d26027ec606a5e5b3b7d6de44d1ec658a46ec36
-
SHA256
f50cf5a04c62231266ff1ed2d344fcd16460449d29cbd8d7992157593e641a8e
-
SHA512
0a1e16197587c6ff3cc46c559b79319135e14cd2f0c683a8f8ef186dd604c0d3ff9f60b601a33efc1e4deeee5474e1ec9a3f463e77b6b2bbeea658fa445a0ccd
-
SSDEEP
24576:k1vp/c2ny/v/LtGZsYjot0+Yen8ZEfGHVxV+35nvCZNWt3mLtciCIf/41q64s81K:k1v8+1dWfhp+F61
Malware Config
Signatures
Files
-
Scan Doc.img.iso
-
Scan Doc.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ