Static task
static1
Behavioral task
behavioral1
Sample
SC521097IOP3.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SC521097IOP3.exe
Resource
win10v2004-20230220-en
General
-
Target
ec5deee2ae2dc568b20effc3b3283d02.bin
-
Size
263KB
-
MD5
2c377356d38043f98cbdc8c75bbdd003
-
SHA1
1381c0d75b1494191b2e717f9dd080d656dd07a1
-
SHA256
e0a359785dcba6429276d1bcb82988e0fb2213601b671e2ddeb4d2f0b0345b70
-
SHA512
390d39eb12a3e2182ea974ee42ef9d5376c19ba3fa7f7e68982148c43f6df2eaa0f7d660e5ab24a1cd0a8efcf2507531c08d8fd21e8a3aa53cc8b1c6dbe11895
-
SSDEEP
6144:BIbtvxpznDH3wDMNv1FcS+Tx8eDikudefcq0CgHAgH9elUVVNH7DXs:BmptDXhTaSumeDvH0MysU18
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/SC521097IOP3.exe
Files
-
ec5deee2ae2dc568b20effc3b3283d02.bin.zip
Password: infected
-
97db5f9ed10e07180b2ae62510dc73c36122b1734ce9f2bd7ca2ab3594b0c7d5.iso.iso
Password: infected
-
SC521097IOP3.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 434KB - Virtual size: 434KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ