Static task
static1
Behavioral task
behavioral1
Sample
IMAGEDDOC0559DOC030273YALUMINUMPROFIL3554EQUANT/IMAGEDDOC0559DOC030273YALUMINUMPROFIL3554EQUANT.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
IMAGEDDOC0559DOC030273YALUMINUMPROFIL3554EQUANT/IMAGEDDOC0559DOC030273YALUMINUMPROFIL3554EQUANT.exe
Resource
win10v2004-20230220-en
General
-
Target
IMAGEDDOC0559DOC030273YALUMINUMPROFIL3554EQUANT.7z
-
Size
984KB
-
MD5
06f6de1eaaf2897a500f3414e34b80a2
-
SHA1
e9d1130376ac2d970f7fe6c55881d89b60b47132
-
SHA256
c1d7550d1cfee7c4dd1eb1a1d9bb711355d44cd0609cf4f50dbdcebb0a7285fa
-
SHA512
a643bb5ecc92bde3405c1b076c4d578f6967688d2baf2a4e31ec3cfaf505ef5d15a5ca85dd92bcd1bbc8ed261fd2d7a7a69574225ea572bd4a7e45865b15f768
-
SSDEEP
24576:BgvNquzvdg0+TAMh39GT6IIKBEY3ODnJ+ICuN:6N5zvdgLTlBq6I7BEYeDneuN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/IMAGEDDOC0559DOC030273YALUMINUMPROFIL3554EQUANT/IMAGEDDOC0559DOC030273YALUMINUMPROFIL3554EQUANT.exe
Files
-
IMAGEDDOC0559DOC030273YALUMINUMPROFIL3554EQUANT.7z.7z
-
IMAGEDDOC0559DOC030273YALUMINUMPROFIL3554EQUANT/IMAGEDDOC0559DOC030273YALUMINUMPROFIL3554EQUANT.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 419KB - Virtual size: 419KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 960KB - Virtual size: 959KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ