Static task
static1
Behavioral task
behavioral1
Sample
470c3ac6350508f77bd2b62e7a41af2dfc518b184f4bc22367f84c3a56987ed6.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
470c3ac6350508f77bd2b62e7a41af2dfc518b184f4bc22367f84c3a56987ed6.exe
Resource
win10v2004-20230220-en
General
-
Target
75df1ac2b8847c5267cd2ce01e880e2a.bin
-
Size
402KB
-
MD5
f17f32a58141e7fdcf6f93677e4ad3bb
-
SHA1
929a5cc13ef1bac77bd43629496d26e1b58690b2
-
SHA256
604f5a474e869047f17e794fa2a28c263247d927f3971d0d75dbe25c9562fd95
-
SHA512
ed0e34304d27a56213f4386ecf2ab45ce0e294437abea28e3b8aefa7e11c7862f233488eb4cae00dac2c220e20c11e2b41f171be9c2b4eee645c2693019b29a8
-
SSDEEP
12288:FJ6XuQG8s1IpEVOpflhY8l933C3Uk03YXpZAik:FwuQSIGVKflhvHCEkDpZTk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/470c3ac6350508f77bd2b62e7a41af2dfc518b184f4bc22367f84c3a56987ed6.exe
Files
-
75df1ac2b8847c5267cd2ce01e880e2a.bin.zip
Password: infected
-
470c3ac6350508f77bd2b62e7a41af2dfc518b184f4bc22367f84c3a56987ed6.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 656KB - Virtual size: 655KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ