Static task
static1
Behavioral task
behavioral1
Sample
Purchase 180423.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Purchase 180423.exe
Resource
win10v2004-20230220-en
General
-
Target
Purchase 180423.rar
-
Size
481KB
-
MD5
1d47fa88dc259dcc6274229be6c68eac
-
SHA1
8a732de0df724543a9dcf0275d1f567df31aa907
-
SHA256
f992b5651b30afcb4d225323781ddeb73ac0494fe6cd602bdc51ad71fd6ae0ac
-
SHA512
8c9cb295305bc40bcbcbefd2fb53b7abfe40f89efbed1df8f10fe1664b350d15ff7634d5e9276df8c4dd3bb84b72c6ad25306411db0412e95616d3bb47c6df32
-
SSDEEP
12288:+knvHHQvRELTZBlsTDNz/fVpSFFQvUZ5U/mmsu:DPH9LTZBWTBppSFIULgPsu
Malware Config
Signatures
Files
-
Purchase 180423.rar.rar
-
Purchase 180423.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 645KB - Virtual size: 644KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ