Static task
static1
Behavioral task
behavioral1
Sample
4c731629ffa2d40458ef7901f271cfb524c132f85f50206d906ca2aaf7cfe9fe.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
4c731629ffa2d40458ef7901f271cfb524c132f85f50206d906ca2aaf7cfe9fe.exe
Resource
win10v2004-20230220-en
General
-
Target
4c731629ffa2d40458ef7901f271cfb524c132f85f50206d906ca2aaf7cfe9fe.zip
-
Size
994KB
-
MD5
d90a81384136194b5f8787a5eda6d3aa
-
SHA1
8400ae92fb8dccbf3a4c1b4a5c1e1055cbe91585
-
SHA256
2270dee15824a1d01ed7c2666c25fd836489931c13b2dce045ef5b6d5ea711a4
-
SHA512
41f5b197fe5180d9354cb6d680b25b5990391c447f8e028c37fe8ff839c07382b207921383cdfa6de4e45ad2b81f7d859beb915695faf7caaa401627b390fddc
-
SSDEEP
24576:LVkJvb/79ECn57ld4EbtgNlLtZ+I4xaPyRgJrQ/eI6:Cvv9EkR5tg7LrZ4vgJreen
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/4c731629ffa2d40458ef7901f271cfb524c132f85f50206d906ca2aaf7cfe9fe.exe
Files
-
4c731629ffa2d40458ef7901f271cfb524c132f85f50206d906ca2aaf7cfe9fe.zip.zip
Password: infected
-
4c731629ffa2d40458ef7901f271cfb524c132f85f50206d906ca2aaf7cfe9fe.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ