Resubmissions
23/05/2023, 01:28
230523-bvwvfsdc89 10Static task
static1
Behavioral task
behavioral1
Sample
8e9c6b72a19705e65d654814d0770a67c7c4a2e52915f6115dc740ab254ed4a9.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
8e9c6b72a19705e65d654814d0770a67c7c4a2e52915f6115dc740ab254ed4a9.exe
Resource
win10v2004-20230220-en
General
-
Target
69525fa93fd47eb3c533afe3b1baba48.bin
-
Size
2KB
-
MD5
5585469fea3e302ef1d31f4dd933487f
-
SHA1
c8c7604ddc69389e25fff30fde083198c3b98209
-
SHA256
e47b928d0fc16348b828abeb3c2106a6d752512f60ef4583d6532cc0dbebebbf
-
SHA512
83449dacd05787656f334e72d6a9e7507d5f79173b7efbfac015a555e87b7e69ee41674763283928c74c88398ccb83e6d6e0822915b8300afce24196680c2dec
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8e9c6b72a19705e65d654814d0770a67c7c4a2e52915f6115dc740ab254ed4a9.exe
Files
-
69525fa93fd47eb3c533afe3b1baba48.bin.zip
Password: infected
-
8e9c6b72a19705e65d654814d0770a67c7c4a2e52915f6115dc740ab254ed4a9.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ