Static task
static1
Behavioral task
behavioral1
Sample
f3412ddcb057b04761d36b9b110db887a12d0af91cea82f7004295a92c004b16.exe
Resource
win7-20230220-en
General
-
Target
731288ec76b58bae03242bb1b908f1bc.bin
-
Size
186KB
-
MD5
901a512d7623df34989a947bc8a53fde
-
SHA1
cef0cd8d1c647597d9848f35d119d9e62eb6c963
-
SHA256
33c64f6bbafee2e5c72893a2088731e652d3d67ffdda25303c1e83ee3fc1fff1
-
SHA512
98ae31f3b9a58ab1bf2505a59ed9af72ec9f5b2ac9df3415e6b9f2f4889734eb04698b8715cf73246cb6a7d138b13a609c10f6221e2833b3db35d582f18092b3
-
SSDEEP
3072:kOMTqVL+2HTtwpm6pZLOkrGaFf2pq93QogR8Xh56uC+mcqx1jvILP16afW/d:k5qVL+0TtspZLOUGcfEq9gogR8R56uY3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/f3412ddcb057b04761d36b9b110db887a12d0af91cea82f7004295a92c004b16.exe
Files
-
731288ec76b58bae03242bb1b908f1bc.bin.zip
Password: infected
-
f3412ddcb057b04761d36b9b110db887a12d0af91cea82f7004295a92c004b16.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 212KB - Virtual size: 211KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 281KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ