Static task
static1
Behavioral task
behavioral1
Sample
97df80ee913cc434c174ca0c2322b23b40665ff48f2aa99ed0f9e81917e6324e.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
97df80ee913cc434c174ca0c2322b23b40665ff48f2aa99ed0f9e81917e6324e.exe
Resource
win10v2004-20230220-en
General
-
Target
97df80ee913cc434c174ca0c2322b23b40665ff48f2aa99ed0f9e81917e6324e.zip
-
Size
63KB
-
MD5
179ff42f51c6f87dd2a703038610c0f3
-
SHA1
3511848a8d6e2e7e6a86c37abc248c98499c3047
-
SHA256
5cb132411c4aaae8cdae7088a5b7296c7de298f655c740bd6a4666ded852f183
-
SHA512
7e73ceb9d2f08a1aca4ea17b8dedf04fefbd27dd56f70ce7ac15a5461dea8baa1800dea566c7583585ca7f0be2a5dc271ae84f76d538beb4a36df239dcd29072
-
SSDEEP
1536:0u0Pix+Skh5R5dTpWGObze4a/4KUEy+K7ScLSXQClvcuHd:v0I65r4na/4OFK7bulVn9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/97df80ee913cc434c174ca0c2322b23b40665ff48f2aa99ed0f9e81917e6324e
Files
-
97df80ee913cc434c174ca0c2322b23b40665ff48f2aa99ed0f9e81917e6324e.zip.zip
Password: infected
-
97df80ee913cc434c174ca0c2322b23b40665ff48f2aa99ed0f9e81917e6324e.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ