Static task
static1
Behavioral task
behavioral1
Sample
ac55de5007190509ac37a6bafde72251a95fab454e879f3e1d40e28de4f04c98.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ac55de5007190509ac37a6bafde72251a95fab454e879f3e1d40e28de4f04c98.exe
Resource
win10v2004-20230220-en
General
-
Target
bbc3b8387f2843611823c1ae3870533d.bin.bin
-
Size
171KB
-
MD5
b4db6596d4d1808509ccf8250017168f
-
SHA1
67099c2e8f69ce9c54bc5ba81a9f271dcbdb1f52
-
SHA256
5af88e502d29efa51b938e7ff2e5e504b1524af9c9f84ff688f312c9030b0f88
-
SHA512
1e50f60b3ead32bdd0b669b974500a1ebd8e32be7e8e63f48da3028ca2b7575ff186dd712241ab47d620a131923e4a99eb3cd56d4b2b426945506730680fb1ee
-
SSDEEP
3072:XnhS6DVDNMUhw7KD5bJjAKpzd8UZ5Wx+G/f6Qf9N68e2+098An9gbqW9Dr+B5:0M1NMUhwi9jHpx8Y6f6QfyY+09hn90q5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ac55de5007190509ac37a6bafde72251a95fab454e879f3e1d40e28de4f04c98.exe
Files
-
bbc3b8387f2843611823c1ae3870533d.bin.bin.zip
Password: infected
-
ac55de5007190509ac37a6bafde72251a95fab454e879f3e1d40e28de4f04c98.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 189KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 403KB - Virtual size: 402KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ