Static task
static1
Behavioral task
behavioral1
Sample
e8527f309846d18fbf85289283dcde7b19063a50b11263ba0d36663df8fcfd30.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
e8527f309846d18fbf85289283dcde7b19063a50b11263ba0d36663df8fcfd30.exe
Resource
win10v2004-20230220-en
General
-
Target
e8527f309846d18fbf85289283dcde7b19063a50b11263ba0d36663df8fcfd30.zip
-
Size
426KB
-
MD5
462675b65cf725789751529f65d1e895
-
SHA1
6f5bc64bb9fce9f50248884efb35a58202f433ab
-
SHA256
fac5c1cefe6463e8b5617cc522d630ad233b1dba859b4f9259623880ebb904b2
-
SHA512
eb95ef0325786d63d2df4b9d478229ff55b84e80b9bea67a40c9580104f3378f0c94b3e320a04d78f8d3ff3b74f7f94ef6419540629025cc75e8784349d76765
-
SSDEEP
6144:koMDIQfE3auUCDqBv1qKpfPNolgVCSG05Wt3MVv9TgjP9zl6tpWR/Q94ZmF7zzZZ:vMZEqdCGB44ES1G3u8VvY9CS7zzZ7j42
Malware Config
Signatures
Files
-
e8527f309846d18fbf85289283dcde7b19063a50b11263ba0d36663df8fcfd30.zip.zip
Password: infected
-
e8527f309846d18fbf85289283dcde7b19063a50b11263ba0d36663df8fcfd30.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 579KB - Virtual size: 578KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ