Static task
static1
Behavioral task
behavioral1
Sample
Download Tracking Reference.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Download Tracking Reference.exe
Resource
win10v2004-20230221-en
General
-
Target
2b8cda9767ac9b5d297ae5e2a82ae01db77313e100bb728c5f293e6c9529da90.zip
-
Size
1.4MB
-
MD5
399923746883992d7dfdad5f617868a5
-
SHA1
e1388a0ae8d0b194b3cedbdc858642e38a90fc1a
-
SHA256
f6510919e1c93e78e60f5c98500df0781a3fad9c7f9069b038ca2d01cdf393c6
-
SHA512
61bf630bb44f16413f85e3d0c402d6ec95fb854b822ba990ddd4f413a21014ab955374110327f593ce99fc5a07dc030487da6f97c5eee59c40b1b85a5bd32250
-
SSDEEP
24576:sfCPf6IdoaGdR0ZVcgX7i/EZYLxCLwolCcA1QHzJCoDUWvX4knXacjnmMHYf4KUA:ys6KW4ZVcgrOsYlhoMcAGNCe4eK2nx4T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Download Tracking Reference.exe
Files
-
2b8cda9767ac9b5d297ae5e2a82ae01db77313e100bb728c5f293e6c9529da90.zip.zip
Password: infected
-
2b8cda9767ac9b5d297ae5e2a82ae01db77313e100bb728c5f293e6c9529da90.rar.rar
Password: infected
-
Download Tracking Reference.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ