Static task
static1
Behavioral task
behavioral1
Sample
21b178d2c4a37e242aba83fb691e598e442539566e5bfabc30f7501798684b4d.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
21b178d2c4a37e242aba83fb691e598e442539566e5bfabc30f7501798684b4d.exe
Resource
win10v2004-20230220-en
General
-
Target
f2dc5c88fbbd39061431626a598224f9.bin
-
Size
730KB
-
MD5
d8d879ee1c6636a76fd723c84beb55b8
-
SHA1
e38f0ac316e1c6d9f9fd66fa970de18024ed3e03
-
SHA256
284cee7fe1e5c5b914b155c5196254ac330db0a106297df4606f7178a0cb082c
-
SHA512
b1c23051e326d30b0a895b131fbd5515949317c914e184f1f5080de115506e56aca3588f4c5e212970396d08172f798158b2443c00761fda722de632b67e3e1c
-
SSDEEP
12288:BN/VL68K6vbr+928u5e8keKmwn7o2ddhZQ3yYibi58ET2DagWRe0amjr4RvPBFM:BN/VL66vn+928InKmw7o2bhZQCYibi51
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/21b178d2c4a37e242aba83fb691e598e442539566e5bfabc30f7501798684b4d.exe
Files
-
f2dc5c88fbbd39061431626a598224f9.bin.zip
Password: infected
-
119e0b0a9d5a8d92dde425a7968a573faf5406dd244de05f176860c0b87492b6.zip.zip
Password: infected
-
21b178d2c4a37e242aba83fb691e598e442539566e5bfabc30f7501798684b4d.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 967KB - Virtual size: 966KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ