Static task
static1
Behavioral task
behavioral1
Sample
4c0241cc1e92aa8ca713ae65cd6b86eb29cacbad2f0799068361eaa3f1dec75a.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
4c0241cc1e92aa8ca713ae65cd6b86eb29cacbad2f0799068361eaa3f1dec75a.exe
Resource
win10v2004-20230221-en
General
-
Target
53ec1849f7b2812a726ce27134ba1c06.bin
-
Size
390KB
-
MD5
5078d38b02edd855a13858cd64ad7d78
-
SHA1
c2d20ae9e4cdf5bb73516dad00ee89586bd3423f
-
SHA256
9cc5a5f2ea8bd82b43e834cbb18d52f08df355454e9171392be0368847b825e8
-
SHA512
d2d6bb589ac5ac891608c84e9c6e5f4cd9f84f9b4e6244b7f957898c92b11c23310cf408df241696c4f469b26991bfd30f3e77fdc2a1cb930f3b44bcf73edecc
-
SSDEEP
6144:zw7lReFNcugebUkpjd1ECU7WufOY9TFWyTx/kqDVl0X45o8/F3uk:c7lRePcugSUgjATWW1FWyTpTL0X4imFL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/4c0241cc1e92aa8ca713ae65cd6b86eb29cacbad2f0799068361eaa3f1dec75a.exe
Files
-
53ec1849f7b2812a726ce27134ba1c06.bin.zip
Password: infected
-
4c0241cc1e92aa8ca713ae65cd6b86eb29cacbad2f0799068361eaa3f1dec75a.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 640KB - Virtual size: 639KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ