Static task
static1
Behavioral task
behavioral1
Sample
DOCUMENT.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
DOCUMENT.exe
Resource
win10v2004-20230221-en
General
-
Target
DOCUMENT.zip
-
Size
685KB
-
MD5
6d6964908889675f4deda0ef8c7beaf4
-
SHA1
d3e2c3e5143292a3e4a990494b1fed36cf7158e6
-
SHA256
09e44a696a8b0cc51b15e77ddf2becb86e577ca94a1a37b2b25ee1929405b359
-
SHA512
402a9ab91353a54595b0006b612f588a795d7628e3408468c024c2e544a5f9e1f4054699602874383d98ad8e76f6acfde341b5cbe6bac2db45a8628d9a8cbdaa
-
SSDEEP
12288:nZx2GLEfRoqdjQPIRFk91LRujABOprfIg5SzT5tq0ddCK7+8XGmu:nGAEfaqdqILkXGYkrwF1VdTyIzu
Malware Config
Signatures
Files
-
DOCUMENT.zip.zip
-
DOCUMENT.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 811KB - Virtual size: 810KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ