Static task
static1
Behavioral task
behavioral1
Sample
9eca24527414a8c5711c376502863053d89c0d82525cfd1dc98a6364975107bc.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
9eca24527414a8c5711c376502863053d89c0d82525cfd1dc98a6364975107bc.exe
Resource
win10v2004-20230220-en
General
-
Target
719db535617887ab0338a39339ff5cab.bin
-
Size
541KB
-
MD5
0a49d68ab77b4c961181551518bec3b8
-
SHA1
e208e908e013c46b3b8daf5f9017a16c5d83933f
-
SHA256
fcc328ad44938c856327e4efa1bbc4861c6738fbd368174abf2a4a0ed2e53182
-
SHA512
9af12c3e7068874d1524025a1138cf39256fee263feaeb4b3a87cf9d466a4f0ca57a354be4476a88affe307975e0978ca21f205ff51aac6b2f85f15b75b60c94
-
SSDEEP
12288:enmWkaiwt3m1i7s1jgYaktQM/1Imr0+6A048HR:hWkXwtn4ltQM9n0+6AKR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9eca24527414a8c5711c376502863053d89c0d82525cfd1dc98a6364975107bc.exe
Files
-
719db535617887ab0338a39339ff5cab.bin.zip
Password: infected
-
9eca24527414a8c5711c376502863053d89c0d82525cfd1dc98a6364975107bc.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 665KB - Virtual size: 664KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ