Static task
static1
Behavioral task
behavioral1
Sample
62b70885135322f966652bed767a573287592bf584a25ff3ece5db815c37ccf6.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
62b70885135322f966652bed767a573287592bf584a25ff3ece5db815c37ccf6.exe
Resource
win10v2004-20230221-en
General
-
Target
ac0468a66c01b94acea51e441bfe0e64.bin
-
Size
164KB
-
MD5
8ff68e9fc3ad2d9846f354cce87d224c
-
SHA1
4355836576c5a29bd3abf62c74ee13f0f7da8752
-
SHA256
5c08037add1818f1f065e1a6a07750c6722478fdadbace179e003ee7cd356a7b
-
SHA512
ef1a7e60e64f080e71aa4e0c324e20ba2dc123d97eb38dc397c94eda559a0aa3c74ce6569fcb34a9ad8e012b547cbcfe4325db875c380cf41d81c79a9e2293fb
-
SSDEEP
3072:nV06OJ8khdPVK32dvO5qmLjuHTu091lXswA9eVp8dabl5L+wD/wkJsEF7ppY:VYddPW2dvOgFXsqV3l57DokJpY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/62b70885135322f966652bed767a573287592bf584a25ff3ece5db815c37ccf6.exe
Files
-
ac0468a66c01b94acea51e441bfe0e64.bin.zip
Password: infected
-
62b70885135322f966652bed767a573287592bf584a25ff3ece5db815c37ccf6.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ