Static task
static1
Behavioral task
behavioral1
Sample
40c71b02ec8f11fd13d2e3284a6118d60be805baaf54021e9b2b1f2447fcec09.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
40c71b02ec8f11fd13d2e3284a6118d60be805baaf54021e9b2b1f2447fcec09.exe
Resource
win10v2004-20230220-en
General
-
Target
40c71b02ec8f11fd13d2e3284a6118d60be805baaf54021e9b2b1f2447fcec09.zip
-
Size
4KB
-
MD5
8de63f071874e89a98a992dee84899de
-
SHA1
7eeed636ebaadb383c48048b0f2ab901b319bd2b
-
SHA256
5ba5fdc8b1ab9f9e12196c160085de62f53453308a4ea10b262c54af000cc5aa
-
SHA512
291af180a3c55c9f53b561a72f4122cae6defff34ff37fad16a8f763ebcf3b029c57ff41d0aae5f1c471208602654bae2464cbc3232c98e55abb28bc1f544eb0
-
SSDEEP
96:RA7n5LDtltb8/GvpFRJcrC8XAGCDIPhI9Ltg2+W4+v2qKM5Q9A:RA7nV5lmChJc6GCDIP4tEW4RwQ9A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/40c71b02ec8f11fd13d2e3284a6118d60be805baaf54021e9b2b1f2447fcec09
Files
-
40c71b02ec8f11fd13d2e3284a6118d60be805baaf54021e9b2b1f2447fcec09.zip.zip
Password: infected
-
40c71b02ec8f11fd13d2e3284a6118d60be805baaf54021e9b2b1f2447fcec09.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ