Static task
static1
Behavioral task
behavioral1
Sample
brr67p2XOZsMqLW.exe
Resource
win7-20230712-en
General
-
Target
386c37e848115b7a4187e88538cc9577.bin
-
Size
632KB
-
MD5
878d85e40d28d154e5876b1299e68712
-
SHA1
a5b083cabd0eb48aab623a193d15e7233838b117
-
SHA256
ca5065d237656bb0bc263c21b091aa35426657270c3ee771aa0f1c110e486059
-
SHA512
08f15ba0d38f519e59e1a76e98908e06db8958d244c0f75d4eff9e42de7f96ec68ec997478a1eaaf0e6cdbc60042be1d9d10974be9571a55a29eb29759a09c80
-
SSDEEP
12288:zWPtxD5DvlSVebxmdJlfNWm8nZzpfoCunp1NoQhNPRbtSbRyTQ2b:zWFroMbYdflpFtVoALStyTQ2b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/brr67p2XOZsMqLW.exe
Files
-
386c37e848115b7a4187e88538cc9577.bin.zip
Password: infected
-
cd8df681ecfb0f0bb885ba21b033cf06af0c23434aa7ee5c7aa048a608020f90.zip.zip
Password: infected
-
brr67p2XOZsMqLW.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 674KB - Virtual size: 673KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ