Static task
static1
Behavioral task
behavioral1
Sample
3928ef7cbe0de57788f45541e81efbca87f3d0539c84c1dfdab9cb675a1c9c62.exe
Resource
win7-20230220-en
General
-
Target
8ace7745ab25bee814881d9cc398fc04.bin
-
Size
470KB
-
MD5
2adbc4799594ed5d1d994bf1a7274d7d
-
SHA1
e296b7712fb657d90b181f6e498c1d21cff427a6
-
SHA256
c5c1648bedaebe2050e31df2d1ed0d7efcd52e4df7c3b9a4ba9fa604ab891531
-
SHA512
ef8153640666a3e356f9043f7b65a0c332316a698731ae43502dd205e66906fe2e50bbea9b2904471ae95b432954abd12d28c499661fdbf9705e3365659fde15
-
SSDEEP
12288:Uj/KWvKT06y89NC4yYFiPFhniT31LX516QRuL3e6XQ:EioKpy8LqYFiPi3sAua6g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/3928ef7cbe0de57788f45541e81efbca87f3d0539c84c1dfdab9cb675a1c9c62.exe
Files
-
8ace7745ab25bee814881d9cc398fc04.bin.zip
Password: infected
-
3928ef7cbe0de57788f45541e81efbca87f3d0539c84c1dfdab9cb675a1c9c62.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 707KB - Virtual size: 706KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ