Static task
static1
Behavioral task
behavioral1
Sample
b3e9adc17f5d928910f6f0eb7c1a2264289fe3492d55e751b60989d7a7bb7e03.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b3e9adc17f5d928910f6f0eb7c1a2264289fe3492d55e751b60989d7a7bb7e03.exe
Resource
win10v2004-20230221-en
General
-
Target
b3e9adc17f5d928910f6f0eb7c1a2264289fe3492d55e751b60989d7a7bb7e03.zip
-
Size
63KB
-
MD5
605818cde1e3e6ef0ff28650af35aa21
-
SHA1
03301d80ecff1a175f005451cd47a3c9fbd39aa3
-
SHA256
10a379a4f6c5c835598ae4a0cfb4030b2a0102a9c85bdfc587033908db27c340
-
SHA512
8086489de9d86ce14ae15f93241b12dd1b5354e428ae4537dac03350e5d8891604118d045359d69237fa964909cb2f36b04a9c593f44841abf47c63288e32052
-
SSDEEP
1536:/fUmRBLC+Em1nCQDSp+NPt1onzg5t+sx3BM88X3Qa:Rqwqp+Nztt+sxU7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b3e9adc17f5d928910f6f0eb7c1a2264289fe3492d55e751b60989d7a7bb7e03
Files
-
b3e9adc17f5d928910f6f0eb7c1a2264289fe3492d55e751b60989d7a7bb7e03.zip.zip
Password: infected
-
b3e9adc17f5d928910f6f0eb7c1a2264289fe3492d55e751b60989d7a7bb7e03.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ