Static task
static1
Behavioral task
behavioral1
Sample
trim-set.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
trim-set.exe
Resource
win10v2004-20230220-en
General
-
Target
trim-set.zip
-
Size
110KB
-
MD5
8767e9fed0c23f3f60ebeff09dea132a
-
SHA1
b6e6df29432375ec4ce24df2975744fc9e45c4d6
-
SHA256
aae8c2b048d26c5ace9147f96488046ba1371dd6356de6b2b5cd5cb0e734617c
-
SHA512
53985da796f07fbafe41a0e9087ffdfc4cf161cf88dd4ca7faaf6ba14ba869ffe2351930189597c360187914defd893eb6aea99c1d8bfbbe9ef81ebac95d0d5d
-
SSDEEP
3072:I49ZN4TIm1P/zHgSvbrq5fECotvbWsUsSxoS:IKqTRVHgWGxEC6vbWsQoS
Malware Config
Signatures
Files
-
trim-set.zip.zip
Password: infected
-
trim-set.exe.exe windows x64
e32f717f76748a6f10a32ea22e18e300
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
SHGetDiskFreeSpaceA
mscoree
_CorExeMain
advapi32
RegisterEventSourceW
user32
EndDialog
kernel32
GetModuleHandleA
Sections
.reloc Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE