Static task
static1
Behavioral task
behavioral1
Sample
a355b9121a7f0916faf7b8db48a0bcf1db2e119f7dde97ea37c4c48f858913a4.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a355b9121a7f0916faf7b8db48a0bcf1db2e119f7dde97ea37c4c48f858913a4.exe
Resource
win10v2004-20230220-en
General
-
Target
a355b9121a7f0916faf7b8db48a0bcf1db2e119f7dde97ea37c4c48f858913a4.zip
-
Size
63KB
-
MD5
72037c9808cf1190c7a1c9ada1971309
-
SHA1
f9e2ae7ca13564d3e644609aff4d77d571271c42
-
SHA256
8124b112f087ad76aa77ef097b2550c965c21f2b1060c1d4a4b441ff31e9bfe4
-
SHA512
b281abca48f2412292d22de74b1d00a0c65653f38d6f1821ce969e049052a62d479682406855081c465ae583b1c259081593595c777976a3fd2bad60e666538a
-
SSDEEP
1536:cJDj0hnG3xbQdSJ5o8U1A8hcX2vv378+GJNYtAAoaIFf:c0nEbQ0o8U1FhcIw+QNYoj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a355b9121a7f0916faf7b8db48a0bcf1db2e119f7dde97ea37c4c48f858913a4
Files
-
a355b9121a7f0916faf7b8db48a0bcf1db2e119f7dde97ea37c4c48f858913a4.zip.zip
Password: infected
-
a355b9121a7f0916faf7b8db48a0bcf1db2e119f7dde97ea37c4c48f858913a4.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ