Static task
static1
Behavioral task
behavioral1
Sample
4644d82860cef54c8cd84971e923baa8ddc0347375701c7dbf5a884bb1c5771c.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
4644d82860cef54c8cd84971e923baa8ddc0347375701c7dbf5a884bb1c5771c.exe
Resource
win10v2004-20230621-en
General
-
Target
7a2e19cad080f0a6bb6daf77b9d268c1.bin
-
Size
514KB
-
MD5
b84012178e660bf2dd4f68fe8b78ad83
-
SHA1
c86f352df5a860e606a9136cf5e30eb66d10465d
-
SHA256
8c63ec3e59c8e215b6b3adc7f60bd32e8fffa71916e13f3a8a3bdf7d35aa852f
-
SHA512
c67a1193b2867a3529cb39ac87ef034832cc8e67d262e11ea9bb94e664ad96e0e0a51be0bf1684decfcb40ed300122c1c06b333e37a9a3ea929070d3b64c60ed
-
SSDEEP
12288:2Rs3HFRvlURymqbt4eEwzzctU4xsM0qDZXaVpfQcg40KZO7:FrNTb2BtUrwio32O7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/4644d82860cef54c8cd84971e923baa8ddc0347375701c7dbf5a884bb1c5771c.exe
Files
-
7a2e19cad080f0a6bb6daf77b9d268c1.bin.zip
Password: infected
-
4644d82860cef54c8cd84971e923baa8ddc0347375701c7dbf5a884bb1c5771c.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 639KB - Virtual size: 639KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ