Static task
static1
Behavioral task
behavioral1
Sample
eb9013c343ab4b99b91861620223802a978910ccc099ecabe8b3a00bb59c6309.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
eb9013c343ab4b99b91861620223802a978910ccc099ecabe8b3a00bb59c6309.exe
Resource
win10v2004-20230703-en
General
-
Target
eb9013c343ab4b99b91861620223802a978910ccc099ecabe8b3a00bb59c6309.zip
-
Size
585KB
-
MD5
21b44b1bb6392ccd9f2b519e88e948bf
-
SHA1
42585e702a6fa48618cf4045aea263a09a94656f
-
SHA256
f8a576e8552d2032c9e5b263a7e8b09c7a81ed77f7aa750723bee95a3fecdf21
-
SHA512
9b754807567c1241b9ea84433b45f393d07fdf9240afa8ff65440b9b2898aeaf1909a63fe2a34c001d82df2a19c79afdca498ce7f33756b1c2c68fbd98c5879f
-
SSDEEP
12288:eSvSUwH3MTYMUe//ieZOcV/u9IturN3/zVRJrpCbyBcnT:eSkMdlKeZO0/ueIF7VzpUyBcnT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/eb9013c343ab4b99b91861620223802a978910ccc099ecabe8b3a00bb59c6309
Files
-
eb9013c343ab4b99b91861620223802a978910ccc099ecabe8b3a00bb59c6309.zip.zip
Password: infected
-
eb9013c343ab4b99b91861620223802a978910ccc099ecabe8b3a00bb59c6309.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 639KB - Virtual size: 639KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ