Static task
static1
Behavioral task
behavioral1
Sample
d28c8e221490ba128fdf8bb6bd371bd2150c79a531e0bb645d25059feb4ff555.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
d28c8e221490ba128fdf8bb6bd371bd2150c79a531e0bb645d25059feb4ff555.exe
Resource
win10v2004-20230220-en
General
-
Target
d28c8e221490ba128fdf8bb6bd371bd2150c79a531e0bb645d25059feb4ff555.zip
-
Size
4KB
-
MD5
1ea88d3217ee0e81af1c44ccd1c86487
-
SHA1
d75c5ee02a58b026d91a8a79637853fbb67541db
-
SHA256
aea00cf7f29a3700f68bd6f088ac835f561ad3420327b3accd04d1aba13d7108
-
SHA512
6d55a02b951a947d15a4feae12b3ef5ead486fca1829c36110676e1e1cbd5c5763665038bd0edec1067f64a5002a2d574ef17bbc127f7f1a3606b4d72ff4cb48
-
SSDEEP
96:9dZQPoSLAwode5bX1n7SaHyZZ6OcCG3SsPNC7lqMlDwtuMjyOj:9XQPoSEwtL9HyZZ0lrPNC7lhJwtuM2Oj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d28c8e221490ba128fdf8bb6bd371bd2150c79a531e0bb645d25059feb4ff555
Files
-
d28c8e221490ba128fdf8bb6bd371bd2150c79a531e0bb645d25059feb4ff555.zip.zip
Password: infected
-
d28c8e221490ba128fdf8bb6bd371bd2150c79a531e0bb645d25059feb4ff555.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ