Static task
static1
Behavioral task
behavioral1
Sample
5f7ef589be80bc41e17b2bc2bb9dcfb9f457815298228b313b4186d983a9b206.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
5f7ef589be80bc41e17b2bc2bb9dcfb9f457815298228b313b4186d983a9b206.exe
Resource
win10v2004-20230221-en
General
-
Target
ac03bc15840de0735bc509df2605315d.bin
-
Size
76KB
-
MD5
46f3839477070811119a567b30751bd4
-
SHA1
fcda089d610d579a3814e419c008ad1147f33b8b
-
SHA256
78a7f06d9ffd24d2fcc0e6d33a50b4016dc88936880cc009ad68f47bf7566b9a
-
SHA512
04c1748266ac572532ece2780aed3636ac6fcacb18d92e1814a802c8b182e3850626d0e7c8073b1e3d4dfe32085db81c467b788e9f05bf01307ca9e9ff668a19
-
SSDEEP
1536:i7ODjC8fMT2F9Nw01dLLd2D0aD72hkr/Z6czaHr842GEwnf6/Ct+vSVNqpuV:yODOkFf1b4uer/ZEHZ7fbt+aVouV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/5f7ef589be80bc41e17b2bc2bb9dcfb9f457815298228b313b4186d983a9b206.exe
Files
-
ac03bc15840de0735bc509df2605315d.bin.zip
Password: infected
-
5f7ef589be80bc41e17b2bc2bb9dcfb9f457815298228b313b4186d983a9b206.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ