Static task
static1
Behavioral task
behavioral1
Sample
68c1f74530323b80492c4e99b03178c592e748a1a2df18e75e458af270c59851.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
68c1f74530323b80492c4e99b03178c592e748a1a2df18e75e458af270c59851.exe
Resource
win10v2004-20230703-en
General
-
Target
2f76e0186b247a653a7492cdb4e05eaa.bin
-
Size
96KB
-
MD5
6870e34b61e220bdba77062cbff99923
-
SHA1
b1117b44c5358cd05622a42c40451869c776557e
-
SHA256
e2a80102719db43c833e5658eee10ae08e68ddd18123e7fb850f034a8aea0272
-
SHA512
f6a49adb0de43e842f0a0b2d59ac5d73e5424cdacbdddf3e1d3b664ec9cc90269c3c69f610fd8bfbd50c44ccaa7eb2eee09faa43f52e6dcbf119f91f065c7000
-
SSDEEP
3072:gYt8TrEyn1VHE+usXDPZBcrCp1jnkdqgXGhURE8sL:gYtwEi1V/7rcI1Qdq9PL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/68c1f74530323b80492c4e99b03178c592e748a1a2df18e75e458af270c59851.exe
Files
-
2f76e0186b247a653a7492cdb4e05eaa.bin.zip
Password: infected
-
68c1f74530323b80492c4e99b03178c592e748a1a2df18e75e458af270c59851.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.�e�t Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.���� Size: 115KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.����� Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ