General
-
Target
400000.ProductsInquiries#VN8399938.7z
-
Size
125KB
-
MD5
b57677f99d0474db259771ab2578a2fd
-
SHA1
b0681bc43d402a36a60b1d7892e1df791d96cbec
-
SHA256
74a73b1414e56d53efdc445214e2119926557afeb596dde6cc685cd95165a526
-
SHA512
4bc689071594d545de6a6f84b6cb339d6b770dcf64310387b425cfd4febdc9a916dde471e4246c313a76f9afddbd2883dbf1d575bb7e8a42402a9282d55824ff
-
SSDEEP
3072:7ePqeXt7YrR66x2AqCN2Z2O4j8+FuJTl5Qt2YOyXHVpiHIrIPyD:7XeXteRzx2nCN2Z6jU5QsjyyHIJD
Malware Config
Extracted
formbook
4.1
fa27
allconseil.com
3-k.top
practical-prototyping.com
kipoxz.xyz
dental-implants-66586.bond
cyphernft.com
nicolemariani.com
suacuasattannoi.com
2023woaidianying8.com
ballerhaul.com
pintobeansnutrition.com
shelving-solution.com
reuralnenworknou.net
childrenscottageschool.com
tekkist.com
dogostrength.com
phoenixstudy.net
emoxos.top
8898892dh1.online
esounsoaps.com
iamincorporated.com
9ddddd012jjj.com
crookeddon.com
kyourcwebmedia.com
jsompump.com
alteramc.com
guangkongdlht.com
summittaxsolution.com
366-huays.club
jitng.xyz
jokerslot123apk.club
99966.fun
wufo-store.com
0md84fnyhsi393.com
wsclaval.com
xsvkwrnfce.com
denizasar.net
motivator.world
blinds-curtains-42123.bond
sxsoya.com
janilondonaesthetics.com
tiket-33.lol
nassami.shop
dbizman.com
kjt44.vip
vicaliteteam.com
dewatatotos.com
juliuskivela.com
grzegorzkocik.com
xhnmg3qis3om.life
kaisar328rtp.life
mrmobilebd.shop
kemubox.com
kano.ink
rutanortecostarica.com
juxex.com
storyofchompers.site
markethilo.com
majhendrickson.com
wxylixie.com
ashbourneu3a.net
revivemat.com
izzytable.com
tzoganis.com
drivereturns.com
Signatures
Files
-
400000.ProductsInquiries#VN8399938.7z.7z
Password: infected
-
400000.ProductsInquiries#VN8399938.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ