Static task
static1
Behavioral task
behavioral1
Sample
731b5cf04a4c9bf4b132ea16ed6480641f33abcf5d5afa48a01ef78ac00123a5.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
731b5cf04a4c9bf4b132ea16ed6480641f33abcf5d5afa48a01ef78ac00123a5.exe
Resource
win10v2004-20230220-en
General
-
Target
731b5cf04a4c9bf4b132ea16ed6480641f33abcf5d5afa48a01ef78ac00123a5.zip
-
Size
348KB
-
MD5
ca10c1fdb205acde2e9db8e835d3ff7f
-
SHA1
b7d4ec78be1b72cd19a93326c949ad2eef0b2d74
-
SHA256
bb8b4b69d4fda4bf9240626783ecfd40508b8bace6da0838469c17b4ae40f5d4
-
SHA512
697f831a35ef30cd82a80d71c8692c19c066d133872b4187a7311b19c08467e7f4fd0bdf2d554678c30a9b4daaa3fa3a3db324c07440c683654f078d55202ad6
-
SSDEEP
6144:962WFpUr0qZbNhLt5CEDtSgz4xeUCZw5RG9x6qKoAFZAwmyatHKfI:96zpshZggG9CZw5K6hoAFZAwmyatHKfI
Malware Config
Signatures
Files
-
731b5cf04a4c9bf4b132ea16ed6480641f33abcf5d5afa48a01ef78ac00123a5.zip.zip
Password: infected
-
731b5cf04a4c9bf4b132ea16ed6480641f33abcf5d5afa48a01ef78ac00123a5.exe.exe windows x86
Password: infected
1343ca50d234527bf272645d6db0664b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
wsock32
WSACleanup
winmm
mixerOpen
version
VerQueryValueW
comctl32
ImageList_Create
psapi
GetModuleBaseNameW
wininet
InternetOpenW
user32
GetDC
gdi32
BitBlt
comdlg32
GetOpenFileNameW
advapi32
RegCloseKey
shell32
DragFinish
ole32
CoGetObject
oleaut32
OleLoadPicture
Sections
.MPRESS1 Size: 334KB - Virtual size: 916KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE