Static task
static1
Behavioral task
behavioral1
Sample
2a1bfb2d892abc77ef98479e6f211f72a76b7a4f329aa7349b3f5118c66f5f2f.exe
Resource
win7-20230712-en
General
-
Target
1df4f9091c1bbfaba0c2b97aabff0212.bin
-
Size
774KB
-
MD5
f2821bcafd75ffba43d043f6ec171a4b
-
SHA1
ce31efc6431815348a33b1f50d84bc41664db9aa
-
SHA256
b45b18ee93b11a47c32bed351d4b82e546fe4c831f925e8ea8858008a711f15f
-
SHA512
74e509aa63e4f6e7524bc8920422145ed3949b8cd2ffd9c583261b243e7def9d0c3964d81c205d5a8db8de11638513be0dc9f62b82961c216c9aabc2af1f7b5d
-
SSDEEP
24576:5OJT6rAWyxZ9JGFSZjZUxtPatdHeSWkHi:iT1JTJGIZjZytPW+T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2a1bfb2d892abc77ef98479e6f211f72a76b7a4f329aa7349b3f5118c66f5f2f.exe
Files
-
1df4f9091c1bbfaba0c2b97aabff0212.bin.zip
Password: infected
-
2a1bfb2d892abc77ef98479e6f211f72a76b7a4f329aa7349b3f5118c66f5f2f.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ