Static task
static1
Behavioral task
behavioral1
Sample
403be0442e847aee7ca7553e19672112450f2e034180a1f57eb8a6d7d39b8d17.exe
Resource
win10v2004-20230220-de
General
-
Target
TripleM_pw_infected.zip
-
Size
14KB
-
MD5
229bf5daa2409fefac35dd91352a66d3
-
SHA1
42d62c3c4b718afd6e479c370d10c0dea9d6bed7
-
SHA256
f14f036256dedb534e400b4195e7a51df430cbf13792596887069c4158030e28
-
SHA512
34cf603228ae944c4d28cada62555390d24dc4b56a02170809a38981d4bcdcf49fa9cf93406bc90ac369da6e3c936792aa7b4f6e18705bf9fe5d1696234b106e
-
SSDEEP
384:c4DONLKNj8xbm2wmkswTdvfZhkgQ5sgrULpRba:c4uGxrm/wTdvxmgEsg4dRba
Malware Config
Signatures
Files
-
TripleM_pw_infected.zip.zip
Password: infected
-
403be0442e847aee7ca7553e19672112450f2e034180a1f57eb8a6d7d39b8d17.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 940B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ