Static task
static1
Behavioral task
behavioral1
Sample
f41e8435ed94d40a0225a5f411991f630f1db80fb2df805da76449bf52889ad1.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
f41e8435ed94d40a0225a5f411991f630f1db80fb2df805da76449bf52889ad1.exe
Resource
win10v2004-20230220-en
General
-
Target
c339bc586c83d1b770c9493fe29269e2.bin
-
Size
594KB
-
MD5
7a69a7c140f95958e2939d72f7b9b48c
-
SHA1
9fb8bf6dd7a3acb7975374f7762deb5ec5fbabe6
-
SHA256
cc2d066f156f66fe591ac750bc496f87d29665298d55cc433e85b4624255c04d
-
SHA512
81d77a5e23ec0edd5ebfca288d9a2072e4c746c3114c0c1bc73bd53d30dc77b36bbc7b07c89d22323d7129f2ca685df2cd6e1600353f2bbf715cb1139828f68a
-
SSDEEP
12288:BBF9C32RV3pa5qPwAzoKpqLAz+p4RSfntqDiH6m/l3un4BOKXef/L:tE32RV32qIAMK8LuwtqS1unbT3L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/f41e8435ed94d40a0225a5f411991f630f1db80fb2df805da76449bf52889ad1.exe
Files
-
c339bc586c83d1b770c9493fe29269e2.bin.zip
Password: infected
-
f41e8435ed94d40a0225a5f411991f630f1db80fb2df805da76449bf52889ad1.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 694KB - Virtual size: 693KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ