Static task
static1
Behavioral task
behavioral1
Sample
2db5bfc582380286cc2295b168aa09ed58defd1f5912d2a147a07d714573da4d.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2db5bfc582380286cc2295b168aa09ed58defd1f5912d2a147a07d714573da4d.exe
Resource
win10v2004-20230220-en
General
-
Target
2db5bfc582380286cc2295b168aa09ed58defd1f5912d2a147a07d714573da4d.zip
-
Size
4KB
-
MD5
204a01d6e76cc532423527d98c889f2c
-
SHA1
bf6f3e6903c9dc3f502cbc6ce6688edb24aa967e
-
SHA256
f51f5505130551912fb8ceacd9597442930a6a71c3ac1e7df91fd928417c48dc
-
SHA512
5fdba383836cd17e78513f7b42b8ba1c00be353438a01b98ebafcb6a8f1595afa9bad42d49c8fc74e5f0bc12c0eb2ca1bc706bd908c22f4df3bcc6f7c02814a8
-
SSDEEP
96:gUh6RA9uDFX3HByy71mp1S+ieyTrbcZeRjQvPTZW5JhvDAKm/YGk:n8AuDFXXByXvoDSPtwfm/k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2db5bfc582380286cc2295b168aa09ed58defd1f5912d2a147a07d714573da4d
Files
-
2db5bfc582380286cc2295b168aa09ed58defd1f5912d2a147a07d714573da4d.zip.zip
Password: infected
-
2db5bfc582380286cc2295b168aa09ed58defd1f5912d2a147a07d714573da4d.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ