Static task
static1
Behavioral task
behavioral1
Sample
aa3e87c3886fe443df71b65dc484b40811a253f1ac642a70c59653912a8a467f.exe
Resource
win10-20230220-en
General
-
Target
aa3e87c3886fe443df71b65dc484b40811a253f1ac642a70c59653912a8a467f.zip
-
Size
532KB
-
MD5
4b335f78ffbe212d7e69ef7e8bba1d60
-
SHA1
65bf68937d36ff9444ef6d1a0a65819ee7d2feb0
-
SHA256
354cdae2ebc268b7398fad3b80e6e0fbc56a11e8599a3dbf5d3caeb8ea389e0e
-
SHA512
b37b6a4011aa40056ec0a8044aa681cc999dc92ab5b3fa1ddd3f6d9cc6447f85bee88045015fa0ac41a5a1a28e2532351bd7c2f549a3635c7e05ed4dc5202dbd
-
SSDEEP
12288:uNFVQ8BVcFH/7flpoj1fi7CJ7MiDdoW/uSeH2LuyiOyq:wfQff797eNDtLbhyq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/aa3e87c3886fe443df71b65dc484b40811a253f1ac642a70c59653912a8a467f.exe
Files
-
aa3e87c3886fe443df71b65dc484b40811a253f1ac642a70c59653912a8a467f.zip.zip
Password: infected
-
aa3e87c3886fe443df71b65dc484b40811a253f1ac642a70c59653912a8a467f.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 638KB - Virtual size: 637KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ