Static task
static1
Behavioral task
behavioral1
Sample
5faf15d82b0485d240a92b6b9d4736b4a85b477c578728f78292e51c70529e94.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
5faf15d82b0485d240a92b6b9d4736b4a85b477c578728f78292e51c70529e94.exe
Resource
win10v2004-20230220-en
General
-
Target
56280d91e6528367bf62eb853a01363b.bin
-
Size
482KB
-
MD5
56280d91e6528367bf62eb853a01363b
-
SHA1
9fd3e8f0e0526b912408e20ce2cb3ea3915cbf32
-
SHA256
dff3c133d3b9008dfd2205b23cc0bb6ff10c21e3ffcca35501fb72900fb535f0
-
SHA512
1e270b8e57372512e86e892fbbb462d8d8cf4cd845f0c8a1f788a486731a0e525d9248fc7b6480799fac73e38430f6590cf51ebdea49f1518205272ed0b16652
-
SSDEEP
6144:pg0JxHI5IEaw6liixj93Q9Oo4Eq8eC4/hQ2oY4hShrz7274G/qmwp5oAmkUwfWIW:pM5TSj9gQhR/JicX27e/osUwL94zH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/5faf15d82b0485d240a92b6b9d4736b4a85b477c578728f78292e51c70529e94.exe
Files
-
56280d91e6528367bf62eb853a01363b.bin.zip
Password: infected
-
5faf15d82b0485d240a92b6b9d4736b4a85b477c578728f78292e51c70529e94.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 646KB - Virtual size: 646KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ