Static task
static1
Behavioral task
behavioral1
Sample
2e0a46b385f21c081f69c940bf850656538a43dd8a1860093b88737f4ff82f8d.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2e0a46b385f21c081f69c940bf850656538a43dd8a1860093b88737f4ff82f8d.exe
Resource
win10v2004-20230220-en
General
-
Target
9981482275.zip
-
Size
29KB
-
MD5
6c6fd0fa2b8ee825722004609af146e2
-
SHA1
e01c6a017d7c0470e12a55e2449e7b5bd99e8c6b
-
SHA256
4335fcd26ce688554a57ca3adeedf545549565c373e7f77ba035224b9879f400
-
SHA512
90d439955785ca47e5a1bab2662b6b4563034beb4cd903caa15830c120d35d82b9e863ee1e6a4bc81fea98cf83aa617346788b2279a91e6aafb8fb99c1cdb433
-
SSDEEP
768:CKK3RnAZ/VLiZeQTnMm9KNgpAvW5OdEpSm5ma:VwdDkNgpb6Edma
Malware Config
Signatures
Files
-
9981482275.zip.zip
Password: infected
-
2e0a46b385f21c081f69c940bf850656538a43dd8a1860093b88737f4ff82f8d.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 347KB - Virtual size: 346KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ