Static task
static1
Behavioral task
behavioral1
Sample
8c0918e6c03961d7f82b1ac9466df259b6a1574803efdc94370f728a707af234.exe
Resource
win7-20230220-en
General
-
Target
8c0918e6c03961d7f82b1ac9466df259b6a1574803efdc94370f728a707af234.zip
-
Size
521KB
-
MD5
6019bb225cb1e1a64bc31da66fbcc36c
-
SHA1
94b809be17cfd485b8470bceb02905b68159ed6a
-
SHA256
2ce9224f042f14d9e59780c46a60697d04486bdc775df2b6b0b6e4fd77947d0b
-
SHA512
5fbc1454afc0af9593d4b2f1f2c6af15db70c30c82fe43fe19971f4f428b318567c78853d5c3da8de2433123049d38d839beb4cc55974667dedd94f8a2c55d8c
-
SSDEEP
12288:+ZSb2XZRM02ryGfktPOLblUTJ6AzM/WS6mt2lkF1C:jOZR8eGsFOLblTAzM+xI2eF1C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8c0918e6c03961d7f82b1ac9466df259b6a1574803efdc94370f728a707af234
Files
-
8c0918e6c03961d7f82b1ac9466df259b6a1574803efdc94370f728a707af234.zip.zip
Password: infected
-
8c0918e6c03961d7f82b1ac9466df259b6a1574803efdc94370f728a707af234.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 583KB - Virtual size: 582KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ