Static task
static1
Behavioral task
behavioral1
Sample
3433109056382544127859043648.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
3433109056382544127859043648.exe
Resource
win10v2004-20230703-en
General
-
Target
c0e4327c771fc41497ea04f6056b9170.bin
-
Size
593KB
-
MD5
d75bc91a4f0c31d987c2c5dc9a3c8c80
-
SHA1
81d65361d0d319191ede59fdae9ded9260d03428
-
SHA256
e2cc085bda62343a2e7865ea1fe901c70bd71661dac3d4838a74ca3aba2ed6a1
-
SHA512
d192e6837cbd0d648a1d7b40319ba610d8e0b6f46f89b586a7e254441b781046510d091c01b07c7ece71ef627cc5c7dc8bb23f2e8b6552071099952141895f5b
-
SSDEEP
12288:/+VBjXuAOcVf0GIAK+j6WVgNK/y4MyhkEP+eOuqYmnp6NJCrb:/+VBOQ8GIA7jPK4Ky2EPNONTALY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/3433109056382544127859043648.exe
Files
-
c0e4327c771fc41497ea04f6056b9170.bin.zip
Password: infected
-
8a8fcf3de73b26d11a9c41d8a999c6e41ebe29dbfebb572fb0a1f700416ccce7.zip.zip
Password: infected
-
3433109056382544127859043648.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 793KB - Virtual size: 793KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ