Static task
static1
Behavioral task
behavioral1
Sample
87405f169e42b52d9561d79b89f6898cc735f0edc26905baecf21673244455ad.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
87405f169e42b52d9561d79b89f6898cc735f0edc26905baecf21673244455ad.exe
Resource
win10v2004-20230220-en
General
-
Target
5c4011f4419361b03efc274afd0f3103.bin
-
Size
599KB
-
MD5
0c16a7b84613b52db6c5e3a42efc1195
-
SHA1
7e56308ec6467378378fc686c2f5b8e3a5380780
-
SHA256
1cb42b1c42f23c9b2d66a4245f0871fe08b059a873ebbbcc69c0ce9cfa3ae9a5
-
SHA512
9a1f341597f825c5675380a55e9309aa67d665fb66666c6e9d826a69495aadb7dc18e87cd769c8c68f09d34f5355109945a7f92c37ffc3d20f368cce942171ca
-
SSDEEP
12288:pl+sSM3UtDpIjB9DYak8vMapW03vNC1Z33ac9qP/hJ7CzbQ0:Z3UtDG9v/Lp1lC1F3be/Dr0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/87405f169e42b52d9561d79b89f6898cc735f0edc26905baecf21673244455ad.exe
Files
-
5c4011f4419361b03efc274afd0f3103.bin.zip
Password: infected
-
87405f169e42b52d9561d79b89f6898cc735f0edc26905baecf21673244455ad.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 718KB - Virtual size: 718KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ