Static task
static1
Behavioral task
behavioral1
Sample
7d6b27a4fd8eec9fd5176dc598d650f8f56eef9a829ff693afa0638cac14e756.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
7d6b27a4fd8eec9fd5176dc598d650f8f56eef9a829ff693afa0638cac14e756.exe
Resource
win10v2004-20230220-en
General
-
Target
0dc0089f6a7714e1b17cf85b07ca9231.bin.bin
-
Size
530KB
-
MD5
e3b4df2ab233cfd02ab348009480c591
-
SHA1
2355764f23d6306d727345922f7942374a69f7e9
-
SHA256
103c61b0c20fcae59e0e35f7ae8d0d5e157b8a632a2124ad0570dd894f3b95cd
-
SHA512
46faea97f53cedc03740fbfb186cd3d409f170a348ee56bb4f1dd0a9ae32a466a9c809d2172a9a5d5116473391bb1af11bceb022058713d70046bcc0fc56e0f8
-
SSDEEP
12288:4AeOzDqWvDZZ43m+E3qI/Gv6kZQ9+ntK8K9KOy1p5iVcrHRj:LfqWtqE3lD+ntIKOAicrxj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/7d6b27a4fd8eec9fd5176dc598d650f8f56eef9a829ff693afa0638cac14e756.exe
Files
-
0dc0089f6a7714e1b17cf85b07ca9231.bin.bin.zip
Password: infected
-
7d6b27a4fd8eec9fd5176dc598d650f8f56eef9a829ff693afa0638cac14e756.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 686KB - Virtual size: 686KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ