Static task
static1
Behavioral task
behavioral1
Sample
63d84d7c82a48d191d9ec89011493738347a206d68b07a03c5dfdbd2a23830a7.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
63d84d7c82a48d191d9ec89011493738347a206d68b07a03c5dfdbd2a23830a7.exe
Resource
win10v2004-20230220-en
General
-
Target
eab2046180ed624253933b1c32b1f879.bin.bin
-
Size
467KB
-
MD5
a6f9e56613ae1a2799228d1f06a27112
-
SHA1
7c184a0a54758dccfb88ac3f4d6d3fbd4468d96b
-
SHA256
d3dff785db560f246df091266e0d873f8ccd0b5a10c79417e129a7618ef7dbbf
-
SHA512
7ee64718bc5417a98163dc769855595f65a13e835227adf58bd83d4ec2def024c656917d24ad3c6b90ecfa0bb7112df779b08494b5848b5f25357d0972d7c74e
-
SSDEEP
12288:n0LjnDZ2XBnjCyBXk7ruuQUTuqmpUM/f1Zu1ETteH54:n+DcXBGyBXk7C7lq2//f1pteH54
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/63d84d7c82a48d191d9ec89011493738347a206d68b07a03c5dfdbd2a23830a7.exe
Files
-
eab2046180ed624253933b1c32b1f879.bin.bin.zip
Password: infected
-
63d84d7c82a48d191d9ec89011493738347a206d68b07a03c5dfdbd2a23830a7.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 557KB - Virtual size: 556KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ