Static task
static1
Behavioral task
behavioral1
Sample
c6e74929d1f5df0946833f77f1074f8a8518a642067b129dae1ad261ded796f2.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
c6e74929d1f5df0946833f77f1074f8a8518a642067b129dae1ad261ded796f2.exe
Resource
win10v2004-20230220-en
General
-
Target
c7bc4f44e279307955bc109deac55204.bin
-
Size
533KB
-
MD5
8bd6c821a4bb219d48619697d27c8f86
-
SHA1
dd56312abe633eb3a71c06fb3e730e7a6fbf052c
-
SHA256
819416c754bbaedea5b79af75d1cc4722e5b1ce1457584a7a39eb38d0d955f95
-
SHA512
629296d3cd8f91b43f0062c020b5c46b356961cce53f1d59d628c196af5ab3dda032039da72fd497ab73f60121283605e7d8a13ec7c28ebef8f45c095efa2015
-
SSDEEP
12288:XFBMaPyP9wYFf1x0Ld/yk32DeFT6bztJFCxrBwstQLrg:1+aA9FmLAPG6H2wsP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/c6e74929d1f5df0946833f77f1074f8a8518a642067b129dae1ad261ded796f2.exe
Files
-
c7bc4f44e279307955bc109deac55204.bin.zip
Password: infected
-
c6e74929d1f5df0946833f77f1074f8a8518a642067b129dae1ad261ded796f2.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 639KB - Virtual size: 638KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ