Static task
static1
Behavioral task
behavioral1
Sample
5ae24c02c4e3b0aea7fef84ef1ecd18c3d535a46fc7c2d4a7759c8ce48bc6e00.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
5ae24c02c4e3b0aea7fef84ef1ecd18c3d535a46fc7c2d4a7759c8ce48bc6e00.exe
Resource
win10v2004-20230703-en
General
-
Target
5ae24c02c4e3b0aea7fef84ef1ecd18c3d535a46fc7c2d4a7759c8ce48bc6e00.zip
-
Size
380KB
-
MD5
4d1701910378edb9b059fd4684048b82
-
SHA1
65acf2af346947b93e9df1ac8ddea341157b7630
-
SHA256
f46698a3dfb8fdb975bf33271f7b72ce4f4773b3541fba5991c4c920c8ae6784
-
SHA512
6822e15c470063f7475368f74206ac0527d1b7db7d1425e72146c7e9341a71f50f3c6104ad925d47d8340fe5825c858274630a3d2d2b3281cd3addfc72f7ac49
-
SSDEEP
6144:9n3UsfjGIwQ2//FzG/kNAZFLDz1Tc1o0W80iqxNnk8PPLVvwCG7LN+UquXDNG:93UsfiIx0/FC/02RTcW0Ynk8PPhJ8Nc3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/5ae24c02c4e3b0aea7fef84ef1ecd18c3d535a46fc7c2d4a7759c8ce48bc6e00
Files
-
5ae24c02c4e3b0aea7fef84ef1ecd18c3d535a46fc7c2d4a7759c8ce48bc6e00.zip.zip
Password: infected
-
5ae24c02c4e3b0aea7fef84ef1ecd18c3d535a46fc7c2d4a7759c8ce48bc6e00.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 499KB - Virtual size: 498KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ