Static task
static1
Behavioral task
behavioral1
Sample
aa5a2a503cb479d5372d25bf22bcc51c6aee150b9d308b9c6205e93f8c3975d9.exe
Resource
win10v2004-20230703-en
General
-
Target
VirusShare_27440e167dee6ba6817a06eef4a0f121.zip
-
Size
14KB
-
MD5
8908f4575fbc2cee2ed0013a1e13e933
-
SHA1
c3eed0d96e422df128ffddd7696d9750bacb21cb
-
SHA256
ca26256c8019cc7ea60f16000065348c86395c2004aadb74d346a9ca38fd7fb1
-
SHA512
52a02b5702e434c6f96d54a2b8a7c9c0bc2254d2246aed33862ad85767db9c4611a27409e619da45b16348fd2bf61c3478c48f379fb3a7724241297d1401e77b
-
SSDEEP
384:eGlDbNgLiEqTcy6puzEh12vE9T3xhADib+zgbSIG8cU:XDRgLiEVvH+E9TBhADiqWHH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/aa5a2a503cb479d5372d25bf22bcc51c6aee150b9d308b9c6205e93f8c3975d9
Files
-
VirusShare_27440e167dee6ba6817a06eef4a0f121.zip.zip
Password: infected
-
aa5a2a503cb479d5372d25bf22bcc51c6aee150b9d308b9c6205e93f8c3975d9.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ