Static task
static1
Behavioral task
behavioral1
Sample
78bab28a914cb40611873e968a0e7897f565cdfaabb4f3e4fa9d3eb4e153c55c.exe
Resource
win7-20230220-en
General
-
Target
4ce410d062b25b0f4f3c418ecfceeee0.bin
-
Size
48KB
-
MD5
c69b4a2debb91084ca16603f3abb2c9b
-
SHA1
db084a811b10397e5e0180706afcfecdf724a609
-
SHA256
c235b6c70c69bf419714add07d1d946ac4e7fc0f4be4c2fa6c5dea5373b45a39
-
SHA512
b34a13bcb9a37cd8a882f560b9b4e051cda50c33585e820ba3da11c72fe3770119483f863051abb990bf73e72052f2e6534959817de70834d5b28e5295e56598
-
SSDEEP
1536:EVU1iS9Vgdr829nD5Z1e4K9+3x+3qzKYFVkzSF:EV+iS0rt9Ks+az9FezSF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/78bab28a914cb40611873e968a0e7897f565cdfaabb4f3e4fa9d3eb4e153c55c.exe
Files
-
4ce410d062b25b0f4f3c418ecfceeee0.bin.zip
Password: infected
-
78bab28a914cb40611873e968a0e7897f565cdfaabb4f3e4fa9d3eb4e153c55c.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ