Static task
static1
Behavioral task
behavioral1
Sample
b3eefb7225c8437ba7e9c6800ffdc0f2bb42225246bc7cc4944ba343b40459dc.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
b3eefb7225c8437ba7e9c6800ffdc0f2bb42225246bc7cc4944ba343b40459dc.exe
Resource
win10v2004-20230703-en
General
-
Target
979604526e37a1e1712e2cbbca12ede0.bin
-
Size
524KB
-
MD5
87b8ffaa7c7ae6b27b1035edb2e6c0e9
-
SHA1
0a0b58f7f4f506be3e07b8a39514052e253caf1e
-
SHA256
0bac87011e89f7243bf6b00d0f33ad4768c7d1318fd5d237c7695c03ea1c0c63
-
SHA512
50d61e747a936bb216013a6a53a478e31df82006d7c97b07417a2398c0405ea944244e327151bbd3fd8fafdf7c514a322242bacbd937640093bd040af903572b
-
SSDEEP
12288:A6ACd+35bCgCNDZwCm5xgHPajhn9NIlZIaTh:S2i5OgjzxJhIJh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b3eefb7225c8437ba7e9c6800ffdc0f2bb42225246bc7cc4944ba343b40459dc.exe
Files
-
979604526e37a1e1712e2cbbca12ede0.bin.zip
Password: infected
-
b3eefb7225c8437ba7e9c6800ffdc0f2bb42225246bc7cc4944ba343b40459dc.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 541KB - Virtual size: 541KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ