Static task
static1
Behavioral task
behavioral1
Sample
8a1f57853b44e3702f2758a4ad46225af7fa0a847ee22b0a9f190be5c062869b.exe
Resource
win7-20230220-en
General
-
Target
bcae62255fcd6391b3ea099ce345209e.bin.bin
-
Size
613KB
-
MD5
5817309fa88103122d1e21e7b7458ca4
-
SHA1
270c0561dbb350926d6fcc630d4a3ed90038f201
-
SHA256
0b640ca6d0c1ee006bcd033bed109ae3383bbaae6f282d128ca32814f2214211
-
SHA512
524f497fad01622c6e5195b0125c50115f87f74646bd5ea5ed868a86d990f01e892b5f3acd9c55fa75ffa41b58b6781f72038cca11be20f2049aea7db318dd05
-
SSDEEP
12288:4YW9iEnzhvzCPOMZnaUEz2BZ92ua6oBGFLVKus9TKiFsJPgS5mhqx7x9Gg:qzuPLEzGZ96SFQTKiI/5mhGt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8a1f57853b44e3702f2758a4ad46225af7fa0a847ee22b0a9f190be5c062869b.exe
Files
-
bcae62255fcd6391b3ea099ce345209e.bin.bin.zip
Password: infected
-
8a1f57853b44e3702f2758a4ad46225af7fa0a847ee22b0a9f190be5c062869b.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 714KB - Virtual size: 714KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ