Static task
static1
Behavioral task
behavioral1
Sample
8adb23186f93c04b4a3624a371edebdbb4748cc57772928448bf872ba8b1063e.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
8adb23186f93c04b4a3624a371edebdbb4748cc57772928448bf872ba8b1063e.exe
Resource
win10v2004-20230703-en
General
-
Target
8adb23186f93c04b4a3624a371edebdbb4748cc57772928448bf872ba8b1063e.zip
-
Size
166KB
-
MD5
fe2e2bb01f00a3747e945da6e8fe7d3c
-
SHA1
6a9ff00540f577a128359458d51ebbbb67c9b74f
-
SHA256
c6f4b34a998123b468ad9312130271ddb797ffd73b1269bd2339349335f4901e
-
SHA512
255c8eaa9f4e0e226b7693a4ebd230834fd2ebef8dbd7b5d5f0d6e76c77c70585cb5dff8e7c04ec7f3ae9c6ef7387961d35888fac8c642470003fd909151d747
-
SSDEEP
3072:BTIqWV09dZXvtPfaTtn/VY4788p8oM8z5DZbstpK+4c8XgD:BTIc9rtPfCtntT7882o0pKRQD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8adb23186f93c04b4a3624a371edebdbb4748cc57772928448bf872ba8b1063e
Files
-
8adb23186f93c04b4a3624a371edebdbb4748cc57772928448bf872ba8b1063e.zip.zip
Password: infected
-
8adb23186f93c04b4a3624a371edebdbb4748cc57772928448bf872ba8b1063e.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ