Static task
static1
Behavioral task
behavioral1
Sample
0dc8c3e880997be2c653e890548e2995b1d2cd079e155f0c74725cbc2a5a5af2.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
0dc8c3e880997be2c653e890548e2995b1d2cd079e155f0c74725cbc2a5a5af2.exe
Resource
win10v2004-20230220-en
General
-
Target
1f3be2d0171631e0428d28bbe6990155.bin
-
Size
50KB
-
MD5
cce0af467eee601b29aa13f207bd2a1d
-
SHA1
a8fec69f5ca497f57fc96757a3cfa5f70ad1c3f6
-
SHA256
69c7952e2ac622bf705b32bc619af016d00d39f3a07496d20d51ec27b2752506
-
SHA512
01338e2f24dfcdb1e27d0e78a8a06e9f93d05b64183c6e7654391dae786f502ff6530140e50208b759566957fe9f04f187c7e01e9872f9307c8daba755f704b8
-
SSDEEP
768:EDGskgxWGknEJd3boqw+AK+ioP7c8fcwHZkBjfuBZL/f2MYOYtec1B4ttdGxlHSX:EytGknEJNMK7OIkHKB6BZRcGtunwlf5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/0dc8c3e880997be2c653e890548e2995b1d2cd079e155f0c74725cbc2a5a5af2.exe
Files
-
1f3be2d0171631e0428d28bbe6990155.bin.zip
Password: infected
-
0dc8c3e880997be2c653e890548e2995b1d2cd079e155f0c74725cbc2a5a5af2.exe.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.clam01 Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.clam02 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.clam03 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE