Static task
static1
Behavioral task
behavioral1
Sample
87ec8dcb44c20195f72ea0d6d2ac3572a9241bb1e0c7f770d8d13e65a4cf9155.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
87ec8dcb44c20195f72ea0d6d2ac3572a9241bb1e0c7f770d8d13e65a4cf9155.exe
Resource
win10v2004-20230220-en
General
-
Target
e8d355ce1c914bb08549edec8272d65c.bin
-
Size
628KB
-
MD5
813dc1dfca2d1a1285b7b43da5c85fd1
-
SHA1
da61d1df2a4a583fbc1aff8b448fd5f7fa0355b8
-
SHA256
38d156744dd3deaa767b15723a34a40d574ebfc07a6c3e978c35323bcc282c9d
-
SHA512
0aec75e4555bae6ec91eea1c30c3551eabd81376605e4771a21ea94397539c68376dbafa7c496d678b99aa4e0fcd4f0ca7f7744ab326ce9c14cc8697f75bb3e4
-
SSDEEP
12288:PMvNBgPkEwFArMpbXYopIDHqFPeDnKI1YYHuQh/2qiHgJa2TJYNSBIp2TM+:ITjpbpeFn31ZHuY/IILJYNwIOD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/87ec8dcb44c20195f72ea0d6d2ac3572a9241bb1e0c7f770d8d13e65a4cf9155.exe
Files
-
e8d355ce1c914bb08549edec8272d65c.bin.zip
Password: infected
-
87ec8dcb44c20195f72ea0d6d2ac3572a9241bb1e0c7f770d8d13e65a4cf9155.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 748KB - Virtual size: 748KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ