Static task
static1
Behavioral task
behavioral1
Sample
91af5b7dfb0cba2f5a7b77d317adb7fac20692d9f759127ecbd780e23fc4673d.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
91af5b7dfb0cba2f5a7b77d317adb7fac20692d9f759127ecbd780e23fc4673d.exe
Resource
win10v2004-20230220-en
General
-
Target
9f9d2eeb4c55962e4771fed02a66ac89.bin
-
Size
536KB
-
MD5
3ebbe3625a19b125e43c2efaab443850
-
SHA1
0a4bbcee9d27b4b88b739fb0e80d512b760577c0
-
SHA256
a337de7e098cfc5381ba82d16df4a8b6e0a8cb3c15b823365466b13cfe7576b5
-
SHA512
c6150b581de654456c8b7bea4f8f9fecf145436879db064db098e3a7b7eef93190231297bd371e67f2406d4f6bfcf58cecf75a33d9c91f9e57a311c7f9d42272
-
SSDEEP
12288:gvVRLJttLN31a50MX0BUnRZO/rcKaBVZac4xHGb+wluOMKiAzlGyf:gvV/tt91Y0Q/itMnac4xHGsOMKLzlG2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/91af5b7dfb0cba2f5a7b77d317adb7fac20692d9f759127ecbd780e23fc4673d.exe
Files
-
9f9d2eeb4c55962e4771fed02a66ac89.bin.zip
Password: infected
-
91af5b7dfb0cba2f5a7b77d317adb7fac20692d9f759127ecbd780e23fc4673d.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 678KB - Virtual size: 677KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ