Static task
static1
Behavioral task
behavioral1
Sample
New order#2_W4355097002.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
New order#2_W4355097002.exe
Resource
win10v2004-20230703-en
General
-
Target
adc5ece44281c2a8b565424a4a56c367.bin
-
Size
575KB
-
MD5
0648857d27585fdcb1097f4c422177c7
-
SHA1
9c5ba50bb00dc478c993120d540695a2e73d06ee
-
SHA256
7e1cab78ee7d45abc2021d7c48528ea5ac2f81685455a35b916b3d4817155cc3
-
SHA512
6fb54d0d1178382bf8700594dee43aa80119e739afbccd1c16cbc4a81545279d5021820b3f35a7dfb1d567d0ad94e81aed282b89fbae6e67aaae55b12d06c49e
-
SSDEEP
12288:8ShTZQ26W4+uLdxsfCTa5FqFMVY9TEWY8aXLDL9se:8ShTZQ2PSdxaCGPqOVjqU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/New order#2_W4355097002.exe
Files
-
adc5ece44281c2a8b565424a4a56c367.bin.zip
Password: infected
-
c1091eace5ea1fda0f62bfbbf244c25dd8deb6d26472ec86fec81992adbb0b2b.zip.zip
Password: infected
-
New order#2_W4355097002.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 599KB - Virtual size: 599KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ