Static task
static1
Behavioral task
behavioral1
Sample
dbcbce96c2bd322f1fcf5369793472f6ff3d6ac375773cb65c40e415744bcf50.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
dbcbce96c2bd322f1fcf5369793472f6ff3d6ac375773cb65c40e415744bcf50.exe
Resource
win10v2004-20230220-en
General
-
Target
dbcbce96c2bd322f1fcf5369793472f6ff3d6ac375773cb65c40e415744bcf50.zip
-
Size
63KB
-
MD5
7035dd3348776eddf751afcc77e5d719
-
SHA1
21f1bfa4198107a6242d45398433c7133f3aa14b
-
SHA256
c3834a89394f2ac43ae90d989d8715c57fa652a5ebf4033d6010696091f6a6e8
-
SHA512
572a931d97e0591fb351527009e7ad942765d1f8f40231a64672f7a1e47aaa11f51fb9d72f69f5a624c5447e41aaf814ff99fbdaacaf059d6466aa6d2241c7e0
-
SSDEEP
1536:by9ItJwW5En28bzrLnCLaBie/VbPKAeJv4xt0yisNedaEdTlcJFGDQX38b7rifC:m05wjP4wH/ZiAeJAwyiOSplMFG97rWC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/dbcbce96c2bd322f1fcf5369793472f6ff3d6ac375773cb65c40e415744bcf50
Files
-
dbcbce96c2bd322f1fcf5369793472f6ff3d6ac375773cb65c40e415744bcf50.zip.zip
Password: infected
-
dbcbce96c2bd322f1fcf5369793472f6ff3d6ac375773cb65c40e415744bcf50.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ