Static task
static1
Behavioral task
behavioral1
Sample
a83688213da481b066908e16d7a2206180627bcef8c69e4fe756dc06c5c35ec0.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a83688213da481b066908e16d7a2206180627bcef8c69e4fe756dc06c5c35ec0.exe
Resource
win10v2004-20230220-en
General
-
Target
3d695f1b4db5a0635d43e1cd1b9d48ae.bin.bin
-
Size
781KB
-
MD5
334c2103c82168a143082fa2cc8b1027
-
SHA1
770f4d5db3f31e11c1857a39c7712ebdbd7f52dd
-
SHA256
f4537ab3fdeb176d352dca40facb96f493d634f7d03140e2275be2ea33678e33
-
SHA512
beb0e5de5e97b10504a3851356127ca75b5421d67a9e8737e76f74370f226f4a5de7963a02848d7dabf131c756e0b64bcef3736c5c7ad2e7694be3ad1d3784c0
-
SSDEEP
12288:sXV3VpViR/z+L5kUV8IoeB1tqnrSz6cSnGO8OCk0CdbOAbda1Wo6VFBHb/a:sXxBM/wkTW1Enmz6NGOlCkVbOAGWv/a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a83688213da481b066908e16d7a2206180627bcef8c69e4fe756dc06c5c35ec0.exe
Files
-
3d695f1b4db5a0635d43e1cd1b9d48ae.bin.bin.zip
Password: infected
-
a83688213da481b066908e16d7a2206180627bcef8c69e4fe756dc06c5c35ec0.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 848KB - Virtual size: 848KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ