Static task
static1
Behavioral task
behavioral1
Sample
d547ab6d0b28d86c32e3d981adc3c5476797c58a6a684a45c3ee0a74847fb571.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
d547ab6d0b28d86c32e3d981adc3c5476797c58a6a684a45c3ee0a74847fb571.exe
Resource
win10v2004-20230220-en
General
-
Target
edb079556e5544b5284fe1a54d72c0fe.bin
-
Size
721KB
-
MD5
0782dc69f96fe11db8fd4da80ccdf25e
-
SHA1
63585dde6d5586ba33795f8ee49c107ab6e03235
-
SHA256
3ac24f4ce2727185cbf1cbf79544a63dd9bb9d1971e2370632fda2cd48956bda
-
SHA512
57971e24a2f9dfa3329c681899faa57157cbab675d38268f9b110bf0720baf7a3d296a6601ac05d442d853f36bd58ef8c0771da354b5a68ba75691bb293a3a30
-
SSDEEP
12288:jodzqdc1Z04rLNz6tPd/XWbXpcJaqRI+qrmqK2FsUAVxixFfFVakrmJnn:u2dYXrJaRXDRI9rhK2FsUAVwxFzakrW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d547ab6d0b28d86c32e3d981adc3c5476797c58a6a684a45c3ee0a74847fb571.exe
Files
-
edb079556e5544b5284fe1a54d72c0fe.bin.zip
Password: infected
-
d547ab6d0b28d86c32e3d981adc3c5476797c58a6a684a45c3ee0a74847fb571.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 802KB - Virtual size: 801KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ