Static task
static1
Behavioral task
behavioral1
Sample
8988c1b9df04d4708e4fe13f4edd568f3ffd79aa20c72467607c83c3a7191194.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
8988c1b9df04d4708e4fe13f4edd568f3ffd79aa20c72467607c83c3a7191194.exe
Resource
win10v2004-20230220-en
General
-
Target
8988c1b9df04d4708e4fe13f4edd568f3ffd79aa20c72467607c83c3a7191194.zip
-
Size
4KB
-
MD5
e42d10e2bd06936c219cc54eadfcae69
-
SHA1
55860a5946e1ac96c4992d1eb8bd987e0326a558
-
SHA256
66ed38074ea6834e14db69a2c20c99667276fc22a347e8758d924c17d034f390
-
SHA512
0e86517a3df7c80af76fb923006e93416da4bc98231dc04191970a510341fe9f32d66e8b397bf2a4f4293e6080983deec5624a20fb17f7a2860911dab3f17425
-
SSDEEP
96:bHz1C4Ogq1isAvWJ++KgbtaWIbEltvfmYzKCSKAovnTpaTVmS2DE04sof:bT1ExAHWDZangzMoTpQZNsof
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8988c1b9df04d4708e4fe13f4edd568f3ffd79aa20c72467607c83c3a7191194
Files
-
8988c1b9df04d4708e4fe13f4edd568f3ffd79aa20c72467607c83c3a7191194.zip.zip
Password: infected
-
8988c1b9df04d4708e4fe13f4edd568f3ffd79aa20c72467607c83c3a7191194.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ