Static task
static1
Behavioral task
behavioral1
Sample
d2d7148e7a1b6442890b4c6f481c38fe0a8aad2ed8b46cc6ded65d37559d609e.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
d2d7148e7a1b6442890b4c6f481c38fe0a8aad2ed8b46cc6ded65d37559d609e.exe
Resource
win10v2004-20230221-en
General
-
Target
d2d7148e7a1b6442890b4c6f481c38fe0a8aad2ed8b46cc6ded65d37559d609e.zip
-
Size
4KB
-
MD5
7014857c8720b00cbde351c5a14882ca
-
SHA1
757398b357411fedc5add37b7603e96c7e50ecbd
-
SHA256
e7cf5eb2fdbafb00a47ea2060888c4a0528754d6623ff8b5ba370f8e1852253f
-
SHA512
c714ab05dbd8f435147f11e32414375500d211de1cb2a31e6ca1ec6f16fe46f9515a04809f836aa5638cceb092a5ed81e26965a84677910c92be117efec1043f
-
SSDEEP
96:UF+iJuow3C1KWS2l1sI97/Vp+3G2z5NFsQhhlumhk4qjz0X5+/Fd2ob3OW:UFBuoeJWS2lXVVpIG2z5NFZhhluCIz00
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d2d7148e7a1b6442890b4c6f481c38fe0a8aad2ed8b46cc6ded65d37559d609e
Files
-
d2d7148e7a1b6442890b4c6f481c38fe0a8aad2ed8b46cc6ded65d37559d609e.zip.zip
Password: infected
-
d2d7148e7a1b6442890b4c6f481c38fe0a8aad2ed8b46cc6ded65d37559d609e.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ