Static task
static1
Behavioral task
behavioral1
Sample
HanzoInjection.exe
Resource
win10v2004-20230220-en
General
-
Target
1.zip
-
Size
97KB
-
MD5
adc837663ce110ef829538e481250bd7
-
SHA1
3e043294734dfdba8d0e1e06a3d9d8a3e7840e73
-
SHA256
0cad347cc06addcc2cc017e5c3076599686020bcf053ad7e8d54f2bf1db3d220
-
SHA512
d4a33254116512f156ea1295b1fad5d6709292cfb103ac9080d4b3f0e2e91819cfa12d9271b8b9f42a738600a1d9b26fdbbea9cb36acd8509d7010ecc3839d73
-
SSDEEP
1536:dfeZl4EDDvqoiHwimCQfcRvy0FJrd2KBdRrU3q73W3djQBCILFwcBvEXq4nW3o4V:dWrfn/oRpbc6PKq7m3daLFlvEXqi4C2f
Malware Config
Signatures
Files
-
1.zip.zip
-
Client.bin
-
HanzoInjection.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ