Static task
static1
Behavioral task
behavioral1
Sample
2eUAFqinCdZebqf.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
2eUAFqinCdZebqf.exe
Resource
win10v2004-20230621-en
General
-
Target
inquiry from Vibroser.rar
-
Size
523KB
-
MD5
bfa6a18ffe24e95c38dd85eb2e46d83a
-
SHA1
5bbe03f0e399527e48559a70195a2d71dbe12461
-
SHA256
3422a906f00faff94c827b84f6458d211b9941271fc6b690b9e7c6bc1bef20f5
-
SHA512
06f852ad903a45e9cf9d8c81d2ba1cfe80ce360303b1d752693a173ccaec29c3da33ebba3c22aa70445a012f21ff29c26b49927268c5576ad00423fa750e4a4f
-
SSDEEP
12288:/aVtvjzQ9KYlYdoV5tgb5cCc7XAtPSYJuA4rK/Mm3hx:CVu9KYSdoa907oqC/j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2eUAFqinCdZebqf.exe
Files
-
inquiry from Vibroser.rar.rar
-
2eUAFqinCdZebqf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 660KB - Virtual size: 660KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ