Static task
static1
Behavioral task
behavioral1
Sample
b63331b6052cd2cdecf84fd9a481bc30a5c8404d09a5694700a6b79f5d76514a.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b63331b6052cd2cdecf84fd9a481bc30a5c8404d09a5694700a6b79f5d76514a.exe
Resource
win10v2004-20230220-en
General
-
Target
5c08164a01b5a7f45e341d643e9cfc47.bin
-
Size
500KB
-
MD5
2d8f77ee5a029e2c6100ad0af792f7a6
-
SHA1
bf2acf332b5fcc34daee8ea65b7c01152cf289ba
-
SHA256
f3553c602336267db7fb39f0bc73accb9ded80a022f00d183b1d99d9e00bcce1
-
SHA512
2dd9bf69f1896013ae2afeaae873e91230b6536ad1473830f532c48506051e160756069bbe1853321943c6d161b0bca0662d065db85913869cb54b8e18ca7c7d
-
SSDEEP
12288:+uVnUTZNpirGq30FDoBngOcn+xhvCGFgueQpwtqstGpOuoV:+uBUT/Eb30FD0ngp+XqGjp4LuoV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/b63331b6052cd2cdecf84fd9a481bc30a5c8404d09a5694700a6b79f5d76514a.exe
Files
-
5c08164a01b5a7f45e341d643e9cfc47.bin.zip
Password: infected
-
1935d4557872efef98cf5bad6884f47dd3f89fed690cda816dd5bda2134fd6c1.zip.zip
Password: infected
-
b63331b6052cd2cdecf84fd9a481bc30a5c8404d09a5694700a6b79f5d76514a.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 858KB - Virtual size: 858KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ