Static task
static1
Behavioral task
behavioral1
Sample
d21806c0151bf7c8df900c319a6eb1ce315ee00298860fdbe1aef252fb3ba160.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
d21806c0151bf7c8df900c319a6eb1ce315ee00298860fdbe1aef252fb3ba160.exe
Resource
win10v2004-20230221-en
General
-
Target
f5a77db120d7658682be7726f7fcf060.bin
-
Size
509KB
-
MD5
f9fa7ae661a636c488a1e5cf9d1569ad
-
SHA1
8929b331dbbaecedb2dbca76ad54b150b39f3e0d
-
SHA256
65bb39719b9789300d3dd93e1ea2a7a6ed18e14e8bd29f9f33815809290a585f
-
SHA512
ffd0e8e8eb3ded8def4549221bc63de0be60c66eebef39909ebb1f201969d388dbc4895db62f26742172fd5987351315226b5e833b3f2cc22c2985c097f81506
-
SSDEEP
12288:LRSP4twjdxp4pw78gvqfCufdM0ErDMHxsz7w9kF9tuI:AypwgAq6ufa1rDMRsz7wWnt3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/d21806c0151bf7c8df900c319a6eb1ce315ee00298860fdbe1aef252fb3ba160.exe
Files
-
f5a77db120d7658682be7726f7fcf060.bin.zip
Password: infected
-
e75b3c3db0268a9df2e7b1dfa8964589838f4dafa08ac42fd1801fa155572395.zip.zip
Password: infected
-
d21806c0151bf7c8df900c319a6eb1ce315ee00298860fdbe1aef252fb3ba160.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 684KB - Virtual size: 683KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ