Static task
static1
Behavioral task
behavioral1
Sample
852e0d9a8f474077261d053d587868b211e70eff320a7e7067c3fc1cb3253ea5.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
852e0d9a8f474077261d053d587868b211e70eff320a7e7067c3fc1cb3253ea5.exe
Resource
win10v2004-20230220-en
General
-
Target
0aab1e371452f83e1b75bac424d4123c.bin
-
Size
568KB
-
MD5
cb6b5e4c6e45f65c06d0abc86a3f6c6e
-
SHA1
09df93055910bed81429d2c5510846e2569c6661
-
SHA256
0866f50f4529fe41dcc5471e40d99d28c373309ee89e11b2110f40f08e92f6f4
-
SHA512
9fb7aeea9b8d52698c39b136c8bf85a12ddc0dfd4d4e856a71fc0b2c4918007595a78cfd500822e6770d2f2d89c6a3ad7166308acb72fbac0e3db15a1a87b3cc
-
SSDEEP
12288:BSgxeQtTyfgShhXeo5PoJQSDy1OAOQtaxMufjgFirk+T226t3:BtNWhXeo5PoPA/kxvLZYO226p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/852e0d9a8f474077261d053d587868b211e70eff320a7e7067c3fc1cb3253ea5.exe
Files
-
0aab1e371452f83e1b75bac424d4123c.bin.zip
Password: infected
-
852e0d9a8f474077261d053d587868b211e70eff320a7e7067c3fc1cb3253ea5.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 996KB - Virtual size: 996KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ