Static task
static1
Behavioral task
behavioral1
Sample
SO GOSUSNH1637860.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SO GOSUSNH1637860.exe
Resource
win10v2004-20230220-en
General
-
Target
83ebe24b198a9ddf5c5c93f89df324ab.bin
-
Size
561KB
-
MD5
5005bf13c0e091a1dbeb71ef1347d100
-
SHA1
bdae9caf0539014a4d79e825f790f0a4500815bb
-
SHA256
eea992fc13871db447f849406c629853b7e0cf2c9440c3117992eca11a41eb43
-
SHA512
fdc97bf175b504fa57361dd0271333164acd8a99a51c8ce8c63330b2bd85599227c7b0045e4724a8be00dd193f5313d9bfae0341d5c8e44c7e5bfd96df101a25
-
SSDEEP
12288:zSbT34guJBA+dybHRJ9pHso49VTwDcgn+cDdN8DOT:ngcBdEJ9pKPrhodNwOT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/SO GOSUSNH1637860.exe
Files
-
83ebe24b198a9ddf5c5c93f89df324ab.bin.zip
Password: infected
-
0c5e521ed50bf0f991335d7fe8f12e9ec047e4331773216e7be6984624e743eb.rar.rar
Password: infected
-
SO GOSUSNH1637860.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 971KB - Virtual size: 971KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ