Static task
static1
Behavioral task
behavioral1
Sample
52f7df04cb306719eead0d602947612f3b909ef4fba8029af064891882ff4048.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
52f7df04cb306719eead0d602947612f3b909ef4fba8029af064891882ff4048.exe
Resource
win10v2004-20230220-en
General
-
Target
c60b9db545c718ad3d65325523ea0bb8.bin
-
Size
547KB
-
MD5
6b341e78274573dc68b9b2ccdac4559f
-
SHA1
330274659bae23e853b6865615cda83f5c4b5222
-
SHA256
630ff8654297a858984c7e1d1898b3752cad50459350d309535b20912957c2df
-
SHA512
49b0d8347137d9e4a1662f6da32867685f246cfd3be1df6fb285b732f3e44aaf8e6837e47362e7f1efc4b925cd64932071b020cded389c9c0f912b177c27ff2f
-
SSDEEP
12288:NrfBHyJJkrmEu6THKgXpwVaeArOJcEphLitXTBBs5Zp:1uJfEu+VqkJOWSKvib
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/52f7df04cb306719eead0d602947612f3b909ef4fba8029af064891882ff4048.exe
Files
-
c60b9db545c718ad3d65325523ea0bb8.bin.zip
Password: infected
-
52f7df04cb306719eead0d602947612f3b909ef4fba8029af064891882ff4048.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 669KB - Virtual size: 669KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ