Static task
static1
Behavioral task
behavioral1
Sample
604c52301a76a47042112a3a7fca37f1c6c205a0888a6e28c5555406c55b2279.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
604c52301a76a47042112a3a7fca37f1c6c205a0888a6e28c5555406c55b2279.exe
Resource
win10v2004-20230703-en
General
-
Target
7e6a2a64c4c0a4fd519f3e6a1850108c.bin
-
Size
551KB
-
MD5
86e738df31f3f029534b84cc0d12376b
-
SHA1
edf1bef0419d1e41cc6c256d6760d0f3d28b9ec6
-
SHA256
c19b20f1177547597b7b99a707857cda14ec7d4156d4a470f02d01897165e912
-
SHA512
0e9d11ae3ca60f9015b9e57a4fb48d2329fe83b45ed37efcf28b72bb136f50e5865d9fe5762a28b159ab04c6b8c9d68b831408be9bff5528de84d400fc789374
-
SSDEEP
12288:E9xFHzOWm1w6rulAI7tr0M4R7Tb1T7BtsIdev7:E9nH1mTrUlITbVBqIW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/604c52301a76a47042112a3a7fca37f1c6c205a0888a6e28c5555406c55b2279.exe
Files
-
7e6a2a64c4c0a4fd519f3e6a1850108c.bin.zip
Password: infected
-
604c52301a76a47042112a3a7fca37f1c6c205a0888a6e28c5555406c55b2279.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 796KB - Virtual size: 795KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ