Static task
static1
Behavioral task
behavioral1
Sample
20e98eeb8f0a79f66b11e00e0f011e170b1f2290762824aac40f6054b9377499.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
20e98eeb8f0a79f66b11e00e0f011e170b1f2290762824aac40f6054b9377499.exe
Resource
win10v2004-20230220-en
General
-
Target
20e98eeb8f0a79f66b11e00e0f011e170b1f2290762824aac40f6054b9377499.zip
-
Size
4KB
-
MD5
4cfa54732c0742fcb65e4798ad128b32
-
SHA1
b50ba0e8cc9cc2c774ab6e9966b518469f82c551
-
SHA256
ec280a877f8f5a11f5755a5b2e186acf523d2d49c3b926de2def5bc80fd5511f
-
SHA512
ab9b27f6ec00c7fa84ab257c94d0c72492cbc1dae11cf99bb15067f43fdc3c7cc9307ce7ded17d088fef9c9b65c124585513c6acbae40c474f6c32381dd6a328
-
SSDEEP
96:62VedLLwc8/Sk4VD5PpViNXyWZh9oxC7a3lTA4DgEQKy9cARqQG:624hMz/MVtzgyW3eca1TlQT9JG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/20e98eeb8f0a79f66b11e00e0f011e170b1f2290762824aac40f6054b9377499
Files
-
20e98eeb8f0a79f66b11e00e0f011e170b1f2290762824aac40f6054b9377499.zip.zip
Password: infected
-
20e98eeb8f0a79f66b11e00e0f011e170b1f2290762824aac40f6054b9377499.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ