Static task
static1
Behavioral task
behavioral1
Sample
b6b0ac3d7e4ef3a97fb470b38e53f3d8114b736b60408d9828cd5f81e2d7cf0e.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b6b0ac3d7e4ef3a97fb470b38e53f3d8114b736b60408d9828cd5f81e2d7cf0e.exe
Resource
win10v2004-20230220-en
General
-
Target
a1ce7b26712e1db177d86fa87d09c354.bin
-
Size
762KB
-
MD5
a338cf8b120ce7c3d06048e38c5170f6
-
SHA1
2c73c33a3cc646125a22631fc01537a86266f7a4
-
SHA256
61bca95b6a024da3cc6ac31c4e24d470d9750a6838cf285136ba7a70f9be847e
-
SHA512
2c15540df59ee0b9356be6e1fe32dc2621dbe495b9f3862e868428a5713645615c09f9e4847f5b9e31f979a5e219c289721a50f9f4185a4749aef097ccf20e99
-
SSDEEP
12288:xS2XljpRoGMkmSn3+YwSYAVrd4q/BS2LrUKLd+XXSMrCNH6Ik8e:xXZpRorkDOKHrd4q/BS2LrUKLd+HSMu0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b6b0ac3d7e4ef3a97fb470b38e53f3d8114b736b60408d9828cd5f81e2d7cf0e.exe
Files
-
a1ce7b26712e1db177d86fa87d09c354.bin.zip
Password: infected
-
b6b0ac3d7e4ef3a97fb470b38e53f3d8114b736b60408d9828cd5f81e2d7cf0e.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 825KB - Virtual size: 824KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ