Static task
static1
Behavioral task
behavioral1
Sample
6b32f25ee457934f481272ba1b12d9f828950fabe0d7df548733c57b6e8d5b2d.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
6b32f25ee457934f481272ba1b12d9f828950fabe0d7df548733c57b6e8d5b2d.exe
Resource
win10v2004-20230220-en
General
-
Target
bece52319c082e828a438800f7e65cee.bin
-
Size
179KB
-
MD5
fb0b93f08a2ac33b5a847d4189f4da8f
-
SHA1
78183e968e228d19112f2dc7dd4d4e3e4b45c0c5
-
SHA256
ea1399795071d4c065b8812b890b231e7bab7e924e28f7d78ef6684a38be999c
-
SHA512
04a2fb549d4fe88228bcb577b8f53a12e73d87659a1c0d929fe003e4d715db5472b5c31d372373813c815f6158d7525893787f24c298b5d0cc4ace73e85a3f44
-
SSDEEP
3072:zYDGqvgSrAFRPat8LIIImMcjL0syAN0UUt7E/OMq51J24r5EOkMa8HFArO55Yp/b:k6EjE688vcRcOWMqvJFNEOk78HSO5WRb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/6b32f25ee457934f481272ba1b12d9f828950fabe0d7df548733c57b6e8d5b2d.exe
Files
-
bece52319c082e828a438800f7e65cee.bin.zip
Password: infected
-
6b32f25ee457934f481272ba1b12d9f828950fabe0d7df548733c57b6e8d5b2d.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 233KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ