Static task
static1
Behavioral task
behavioral1
Sample
IMAGE OF AGREEMENT COPY.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
IMAGE OF AGREEMENT COPY.exe
Resource
win10v2004-20230220-en
General
-
Target
c1f91b946662cba53273b715ad23fc35.bin
-
Size
1.7MB
-
MD5
5e606b0223a032a25a15f65825a3da69
-
SHA1
32a2ed2e35918d1079df8226ea0c1cf20a04c217
-
SHA256
70ad85fb55c3799a5b4810d62fd8df1dea2c6b586c925bf2c37ab8f9fa652509
-
SHA512
1592b8e33737856ced1fbdfcf41c764487268d6e2237a4c52083f81ef7e02278193a36735d11b84e1dc1de8716a3adafd07636619d13c5cfcf3218fbbe59845e
-
SSDEEP
12288:3zHBLqhmg3hpOXdXPjaGpXnOFhDM0kq27/ufAK7ZD1OBwt4R2Y4:jhLqUg3hKdXPTgxMPqrfAK7SBqY4
Malware Config
Signatures
Files
-
c1f91b946662cba53273b715ad23fc35.bin.zip
-
IMAGE OF AGREEMENT COPY.bat.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 322KB - Virtual size: 321KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ