Static task
static1
Behavioral task
behavioral1
Sample
7ade8e9cc5023375d100ff66a55971fe3b7a06e73edaec66ed0595b9f252b52e.exe
Resource
win7-20230220-en
General
-
Target
7ade8e9cc5023375d100ff66a55971fe3b7a06e73edaec66ed0595b9f252b52e.zip
-
Size
352KB
-
MD5
2739127d478b062ec8012aa96a464a92
-
SHA1
50d5c5b3e73ee40430cb56bf847c985e1847ef6a
-
SHA256
f4b5fe26abddef6f7998b9adfc30e9c5727ecc65c9c6f83bc3b6d7ca5f1c69e4
-
SHA512
3e9ae54c07cae57f070fd41f7f87a792d21a573a45ed8797232b78a6a3c7c2b2c5777dbf3042fdb1e8eff449cc5f5a8ee8cbeaf2e8207610b10e3cc77db0801e
-
SSDEEP
6144:byWFflcWLCjpbPezpJSjMGnK+lkUEIA24sCkobp1RoSFD7pKOcZBWPIga4JCl:byw9PojezpJSjbK+oIA24dZbpoCD7eoc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/7ade8e9cc5023375d100ff66a55971fe3b7a06e73edaec66ed0595b9f252b52e.exe
Files
-
7ade8e9cc5023375d100ff66a55971fe3b7a06e73edaec66ed0595b9f252b52e.zip.zip
Password: infected
-
7ade8e9cc5023375d100ff66a55971fe3b7a06e73edaec66ed0595b9f252b52e.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 358KB - Virtual size: 358KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ