Static task
static1
Behavioral task
behavioral1
Sample
9a97d9127c4f8158ec393f7e0c47bd056fe6eee6c76c05600dd0c219d1de405f.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
9a97d9127c4f8158ec393f7e0c47bd056fe6eee6c76c05600dd0c219d1de405f.exe
Resource
win10v2004-20230220-en
General
-
Target
2ff4d870cb02831c65b73f1d0205ce09.bin
-
Size
479KB
-
MD5
3d0babb482f34cd9df2ac9bac40249af
-
SHA1
caf14aeab2a5e8dd731e1af6edf9fc1a17e4d9fd
-
SHA256
a199f8a3a98aa9ef03652042b43920ec4653f82eee01fb13b1affee47672b7d2
-
SHA512
b1bd264169314770dc9fac86891dd0c9a9cd56a83d36b549c8784ca149ca0d46f3b12fce2f26af587a9321b3842d7b92a0d40a895a4f7585cf47db3e34f6efa1
-
SSDEEP
12288:N3DkXJzRwLbRBgmHJDE9k3HuGDh88bEEidxkWP:xDgJNc7gmW9+HTD/RcxPP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9a97d9127c4f8158ec393f7e0c47bd056fe6eee6c76c05600dd0c219d1de405f.exe
Files
-
2ff4d870cb02831c65b73f1d0205ce09.bin.zip
Password: infected
-
9a97d9127c4f8158ec393f7e0c47bd056fe6eee6c76c05600dd0c219d1de405f.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 671KB - Virtual size: 671KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ