Static task
static1
Behavioral task
behavioral1
Sample
81c086e249101b2f7f623296738543eff2d419aed16713c522be56fdeb4f2ca1.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
81c086e249101b2f7f623296738543eff2d419aed16713c522be56fdeb4f2ca1.exe
Resource
win10v2004-20230220-en
General
-
Target
ec2fc08a08fd29be6886f2eb9f9e2e19.bin
-
Size
272KB
-
MD5
c382272925af6a9dcaf17d20b8ba77a9
-
SHA1
a5a3402b95d986b396debfe9a95c43a45e78bd42
-
SHA256
b7c3ab24696ff6ed6d059bb13ba92108109770e5d30bb3bfa77d34de7fa3ceea
-
SHA512
3adcab901097de82985b52edfe386f029153fbf603846904982d28431f2d5483bd851932b21ad61e979b3e0f698c0c63ef3b7ce366a9b44838bd94c56ebc852f
-
SSDEEP
6144:Lsp9+rzSuoXWXgKXrHL0iyPgXh1Z5JjC1qb/x1CnnL2eCwtEOBF7TSs:49McFKzLCgR1jhOO/q6RcF7D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/81c086e249101b2f7f623296738543eff2d419aed16713c522be56fdeb4f2ca1.exe
Files
-
ec2fc08a08fd29be6886f2eb9f9e2e19.bin.zip
Password: infected
-
81c086e249101b2f7f623296738543eff2d419aed16713c522be56fdeb4f2ca1.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 319KB - Virtual size: 318KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ