Static task
static1
Behavioral task
behavioral1
Sample
AWB No S14-213008.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
AWB No S14-213008.exe
Resource
win10v2004-20230220-en
General
-
Target
724eff149c2bae4dcc3d50f35fe0bf0b.bin
-
Size
601KB
-
MD5
c4e563418bf34b0606b12e9061fa4c70
-
SHA1
9995ceb181739c098259d13dea507a49b34da2de
-
SHA256
7de4081caf0144cddec718aeb110ae2d33612db3aef836d36452f31d188e0e1c
-
SHA512
8de91b44947e7594806a50eddbd6de483c4cf2a1a3d21cc33ce392acf9766ecf2a501455cb08d897835f700fc88bdd30d2c25ddfdbb1842abd707e98d30e6478
-
SSDEEP
12288:gP6z1F6G8AcjcK1knr6KKfcJQctccaJnVynT4uiLGzv3pqns1RXV/RjFpV:Z/X81yr6KKlctccUyuL2vZqszlJjLV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/AWB No S14-213008.exe
Files
-
724eff149c2bae4dcc3d50f35fe0bf0b.bin.zip
Password: infected
-
0ea0b0f9793ca919080fe3dc6568ce4eea7911c4f4c651569c6db95a5eaca160.zip.zip
Password: infected
-
AWB No S14-213008.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 749KB - Virtual size: 748KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ