Static task
static1
Behavioral task
behavioral1
Sample
DOCX_FACT_FE5144.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
DOCX_FACT_FE5144.exe
Resource
win10v2004-20230220-en
General
-
Target
DOCX_FACT_FE5144 6100.tar
-
Size
1.5MB
-
MD5
39b59112a931cf1ea10a77f69ea84454
-
SHA1
8e8248dd1f02604bce599f0a87b88ddc6481644e
-
SHA256
b0865dd58ff22d85793a81ec318486ba86a5951109d0d313a6053ad76e637b43
-
SHA512
c222b8fde087cd471de510c7eb44b8ee5e0e9b5d4f022e939c150f7eab4d091ad0b6a209897f516c4d3168eff979f1b090c771f5672337a577e46b47f553586e
-
SSDEEP
49152:vSqv26EgiDpzPizpRXPPxwTgpo9ECcgTHtne:vfvgdZop0cp98Je
Malware Config
Signatures
Files
-
DOCX_FACT_FE5144 6100.tar.rar
-
DOCX_FACT_FE5144.exe.exe windows x86
Password: 6100
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 538KB - Virtual size: 538KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ