Static task
static1
Behavioral task
behavioral1
Sample
1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845.exe
Resource
win10v2004-20230220-en
General
-
Target
1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845.zip
-
Size
98KB
-
MD5
37301732649f864f8930124db0548322
-
SHA1
8bb60f0cd425df1b2f05ddf4847a56fc692d4573
-
SHA256
191859b95f839a1586e16e38f164998f896064a25d21d4839f5035116db00c4f
-
SHA512
ae58fa87b88cf002ecd55cda8d810d378c0bf34291496a8e303dd3b2b4b01ec7d271488d3270551106bb23801a1989b7e6dbcb06bbdb54b61a2f781d04d9a9f7
-
SSDEEP
3072:5+8SEnqvLuB31UqT9N/31Vbg8BynURz6BZ8cR:kfgUuHT9N/3bUWlY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845.exe
Files
-
1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845.zip.zip
Password: infected
-
1c8bc3890f3f202e459fb87acec4602955697eef3b08c93c15ebb0facb019845.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ