Static task
static1
Behavioral task
behavioral1
Sample
7bdb76bc212b1fadd5f61ea2305f0fc082fa6720c23f614687add9d4b3de2ce4.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
7bdb76bc212b1fadd5f61ea2305f0fc082fa6720c23f614687add9d4b3de2ce4.exe
Resource
win10v2004-20230703-en
General
-
Target
bdd7553bc13603af4f4a63db7d2fed5b.bin
-
Size
516KB
-
MD5
29589625ae6d591d2d027347a98798e2
-
SHA1
b265c7914a5b5f2e0cc5f8eacff7325907255584
-
SHA256
61eff620832389133e6b5368aab5d164b23f804e65ede156ce535a24c9b0fd6a
-
SHA512
79f2b7a7d36082f7b54e25a736fa0ff1d81f2d7c380a9ab3ab03aef0c7b12e47ab3a1b1630cba6f4abfa8ba6504a9cd3f6699e20a16b4055f7b128090ebf2380
-
SSDEEP
12288:SBwcRFRJEw1mGcFxP8MLNBfhgv9/qqL1C8qnqDm:JcYQmdxP8I5+bL1C8Rm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/7bdb76bc212b1fadd5f61ea2305f0fc082fa6720c23f614687add9d4b3de2ce4.exe
Files
-
bdd7553bc13603af4f4a63db7d2fed5b.bin.zip
Password: infected
-
7bdb76bc212b1fadd5f61ea2305f0fc082fa6720c23f614687add9d4b3de2ce4.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 623KB - Virtual size: 623KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ