Static task
static1
Behavioral task
behavioral1
Sample
d2475c14cd534bca8b3a7a584900668545ed04d7f04c55c0958e05deaec4a7fc.exe
Resource
win7-20230712-en
General
-
Target
3d65e5bf187bdb64286f9982c330ca14.bin
-
Size
587KB
-
MD5
a7e97826dc3868513957c4965cb49a6a
-
SHA1
c05ec86191b7bad0f2bcc3753fd157b825cf026b
-
SHA256
7c5197e6d87deb8d65b704662a63a3f6ada7a47d9dafc200bb54d35f74dfb965
-
SHA512
1167272f5106a370cbde6f7b2cd4554754752a1762902b4fc8e26f28262a6322392d722430108f0f845c0ea2d58fc6ac011287ac14247ebd5c9462877d60a610
-
SSDEEP
12288:2nL7tLuyCKv3iRGm7M4I89YfawHZ4+zjCmLDTKoawPiaxk7Xa:yL7tLBnv3QM8utRPTKoahaqra
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d2475c14cd534bca8b3a7a584900668545ed04d7f04c55c0958e05deaec4a7fc.exe
Files
-
3d65e5bf187bdb64286f9982c330ca14.bin.zip
Password: infected
-
d2475c14cd534bca8b3a7a584900668545ed04d7f04c55c0958e05deaec4a7fc.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 625KB - Virtual size: 625KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ