Static task
static1
Behavioral task
behavioral1
Sample
9cced70d2cf7353bd50e98b2dcaa0337a9c74a23874c69452b82cfae70aa3463.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
9cced70d2cf7353bd50e98b2dcaa0337a9c74a23874c69452b82cfae70aa3463.exe
Resource
win10v2004-20230703-en
General
-
Target
439653c875975612a2f126330b778453.bin
-
Size
591KB
-
MD5
7bef2c22458ad9ab856885a2f83c7e5a
-
SHA1
5f64f4988cf605fb7d8d2ef17a9cad0bc099bdb2
-
SHA256
b4772082c313d39326fc947917cd6583ebcb9738ca4e92734641aedc97911ea0
-
SHA512
4694015162639bd19876d057d8082808c1a88578e2f31a223bb9975aa456ecd17d0746db3a642256afcd73d55666ed04de5a34c281c2649551be910cfa976bca
-
SSDEEP
12288:aNQDf18tQqcIqjOOvbTBK15Ev9yIO88EEH62UD2j3UHguiiAwoxGtIOvzab:gQDf1SQqQjO8vk7o9yI7VEH6J2QHguJK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9cced70d2cf7353bd50e98b2dcaa0337a9c74a23874c69452b82cfae70aa3463.exe
Files
-
439653c875975612a2f126330b778453.bin.zip
Password: infected
-
9cced70d2cf7353bd50e98b2dcaa0337a9c74a23874c69452b82cfae70aa3463.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 789KB - Virtual size: 788KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ