Static task
static1
Behavioral task
behavioral1
Sample
a2350b33548abf34e63361ea80d402e3d6f83571bea91578bea7ea578e57af44.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a2350b33548abf34e63361ea80d402e3d6f83571bea91578bea7ea578e57af44.exe
Resource
win10v2004-20230221-en
General
-
Target
fc1b4e9eea73a359e3781aa15c013ebe.bin
-
Size
776KB
-
MD5
23d07d78aa5c69a534568d25057fbaf9
-
SHA1
bb83465f969e3eb4b8b692998ca49fa60f5885c3
-
SHA256
5fdd8227e6285a08ca68db4316693ab18932d5aeca52303fc3e6e449380ddf20
-
SHA512
4e3c447a34f4ebc3cc4e11f58983351d123fe944159270c80a6783e3f19cb83f3de5b445f574a571e1b4d4cbb8b3de2b9a2bb633ddd9121ef35cd3593c3cebdc
-
SSDEEP
12288:jXDnAkthWJKKQZHTsYmp5PBKd4zIEJkEtdcSbNKSh/MxpN8c1ZWXM/R:XndL8QZHTsBpzKd4zIEq+cyXqR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/a2350b33548abf34e63361ea80d402e3d6f83571bea91578bea7ea578e57af44.exe
Files
-
fc1b4e9eea73a359e3781aa15c013ebe.bin.zip
Password: infected
-
75256a5cd60ef3bceb277cca6964b51f236d23f966846b5e748446c042d4890d.zip.zip
Password: infected
-
a2350b33548abf34e63361ea80d402e3d6f83571bea91578bea7ea578e57af44.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1013KB - Virtual size: 1012KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ