Static task
static1
Behavioral task
behavioral1
Sample
4a694d219b01e31d19381b75ab5afb011c0b4c50322aa7b15fb62cd1a261287f.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
4a694d219b01e31d19381b75ab5afb011c0b4c50322aa7b15fb62cd1a261287f.exe
Resource
win10v2004-20230221-en
General
-
Target
4a694d219b01e31d19381b75ab5afb011c0b4c50322aa7b15fb62cd1a261287f.zip
-
Size
4KB
-
MD5
8d1b787bfd7cd2476d9d23d96e958cb8
-
SHA1
abed332d1f33106017da0e1b9dc42506a26bbbcb
-
SHA256
25ccfc128a602540b49911d8aed485ab8abcbd300a86c4ffe4505bf014a20751
-
SHA512
db35f6503ba9945d366c098f0a3b41fd7c1fccba86751e9ae4bf8ad14cc90c8135bb49da25522c7cea3bcd4af6ad69a15116221a1c66a387a220e1c028f8edf7
-
SSDEEP
96:05V+a/QhBtGYMGBel2kLLZ3B0z4xcOT9seNXC5N:0i5bIYhPEx0zIP9ZNXCz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/4a694d219b01e31d19381b75ab5afb011c0b4c50322aa7b15fb62cd1a261287f
Files
-
4a694d219b01e31d19381b75ab5afb011c0b4c50322aa7b15fb62cd1a261287f.zip.zip
Password: infected
-
4a694d219b01e31d19381b75ab5afb011c0b4c50322aa7b15fb62cd1a261287f.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ