Static task
static1
Behavioral task
behavioral1
Sample
entry_1_0/OpsManager2.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
entry_1_0/OpsManager2.exe
Resource
win10v2004-20230220-en
General
-
Target
file_48265ea1cb944562b6d600d612d850c5_2023-06-06_12_57_30_172000.zip
-
Size
9KB
-
MD5
aa7212616d7f258ac57a7fe470911833
-
SHA1
24a8a3aab37726eac53faae96033ce50c18b6b5b
-
SHA256
2a72a4a66a2855497f702f6361e411f7ecc06ebb110bd5e91e0386dea25be73b
-
SHA512
2276dff2dc45ea9cbd4ab064726baf5a8948749fc90f6e993532f398225941926002c4ea23acbbbdb02ecc95f3a6c0c4e729819725936f49e3160a84679f7f72
-
SSDEEP
192:EQwS/tSh4++vqRJ+IXEBLcpjMkeF5rQT/Nw/EAOa1vvbo0ax3Drz2tdKo:EQw4+jRJ+IXEBLMjMkeFv/E41nspxz2F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/entry_1_0/OpsManager2.exe
Files
-
file_48265ea1cb944562b6d600d612d850c5_2023-06-06_12_57_30_172000.zip.zip
-
entry_1_0/OpsManager2.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
manifest.json