Static task
static1
Behavioral task
behavioral1
Sample
eb9013c343ab4b99b91861620223802a978910ccc099ecabe8b3a00bb59c6309.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
eb9013c343ab4b99b91861620223802a978910ccc099ecabe8b3a00bb59c6309.exe
Resource
win10v2004-20230621-en
General
-
Target
ca8d7885ce82f5d2392650125fb2d333.bin
-
Size
587KB
-
MD5
906c0938ea4b237e33613c7bd8a01a2d
-
SHA1
80a37bd654cd8a613ece9d9c5571d7cce989116e
-
SHA256
5199fdc49223c7a09b0de6c87b10e6f4108a2bace7fc50373e2e06bba8a09720
-
SHA512
f2879a7800e34afb9f3476fe857a0ae4c1028441eb424338ca4a6969a39bf075db5376e5aaccf01a043c2117232e8aafbdeeaeffa690f8adeb9757fed31278b0
-
SSDEEP
12288:yW2dIXCPhd5IK0fNW1foZrYccuQnGAoRIoU+Dd1uE3beJCGeYiiXp1BG1IdQz:yW2VhsKpVU8CQngGoUU3L8CGeYii57GN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/eb9013c343ab4b99b91861620223802a978910ccc099ecabe8b3a00bb59c6309.exe
Files
-
ca8d7885ce82f5d2392650125fb2d333.bin.zip
Password: infected
-
eb9013c343ab4b99b91861620223802a978910ccc099ecabe8b3a00bb59c6309.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 639KB - Virtual size: 639KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ