Static task
static1
Behavioral task
behavioral1
Sample
c084e334c31cf636666e63fbff0d155fcb10cb813f21e5c262eb21530c4c1755.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
c084e334c31cf636666e63fbff0d155fcb10cb813f21e5c262eb21530c4c1755.exe
Resource
win10v2004-20230220-en
General
-
Target
c084e334c31cf636666e63fbff0d155fcb10cb813f21e5c262eb21530c4c1755.zip
-
Size
33KB
-
MD5
5b8b8903c9462891361ec80473c7d44d
-
SHA1
8a1782561cd98e26584246e4c237cedf65e16c1a
-
SHA256
af7b20f7dae6adad79daaafa618d0d932f2e3afe31c059aefd726772597d27ed
-
SHA512
33b39b4892f1b4a1347eb32d449691d1762ebe16ca3c3d27b281594bd05c28629fddd647558856c9e1c4ef2c19c55acda32f92603bd381e52348a2873f8c22bb
-
SSDEEP
768:MeRvNCRHE083MsLKyb0yuUhAqfxteB9TrMWFbP:MeNKkH3Pm9yVhAb9TrNN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/c084e334c31cf636666e63fbff0d155fcb10cb813f21e5c262eb21530c4c1755.exe
Files
-
c084e334c31cf636666e63fbff0d155fcb10cb813f21e5c262eb21530c4c1755.zip.zip
Password: infected
-
c084e334c31cf636666e63fbff0d155fcb10cb813f21e5c262eb21530c4c1755.exe.exe windows x64
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 248KB - Virtual size: 247KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ