Static task
static1
Behavioral task
behavioral1
Sample
17c24780dc53fb2be88c217bf6d9b20b65a0c8be110a31ca285b329c7e4acb43.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
17c24780dc53fb2be88c217bf6d9b20b65a0c8be110a31ca285b329c7e4acb43.exe
Resource
win10v2004-20230703-en
General
-
Target
17c24780dc53fb2be88c217bf6d9b20b65a0c8be110a31ca285b329c7e4acb43.zip
-
Size
1.1MB
-
MD5
98385c439b3ad1390f2676a64d08df77
-
SHA1
d4dcd85961426315c024e041e6d6c1fec1f5c3fd
-
SHA256
ca455d5a899af1590e8ed47abf7507b36ff268ad0cb19fa613731628d252267a
-
SHA512
1eaa51cabbb02385ee5d46798f9f27d970287e80464be08efed3e51cbe88b515ba77b64627b545fe4b006384b9ccb1a5a006d04e736f093cf0a6ac8056e40f6c
-
SSDEEP
24576:qIGwCyNnw93CWXky7pnNIs52sxJ5trsWHxTss2G7yJVR:qIGl0I3K0nqsQgJ5mixTBS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/17c24780dc53fb2be88c217bf6d9b20b65a0c8be110a31ca285b329c7e4acb43
Files
-
17c24780dc53fb2be88c217bf6d9b20b65a0c8be110a31ca285b329c7e4acb43.zip.zip
Password: threatbook
-
17c24780dc53fb2be88c217bf6d9b20b65a0c8be110a31ca285b329c7e4acb43.exe windows x86
Password: threatbook
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ