Static task
static1
Behavioral task
behavioral1
Sample
f9de5be5d337c16f6a3ad525011586ae0b14f04169e9b6ae61a35397a3311079.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
f9de5be5d337c16f6a3ad525011586ae0b14f04169e9b6ae61a35397a3311079.exe
Resource
win10v2004-20230703-en
General
-
Target
cd88bacf312e7e4b45258af81ce8048b.bin
-
Size
556KB
-
MD5
86ffaf3aac8f4382f8306ae454d87b08
-
SHA1
02d18fc8e9a77835b6d08d0e6ff4a31a41c9d00d
-
SHA256
4b9467bb99cd44ff12bb3cdde99db5d26e0e5ac7fdec3cd790529d71fae43dbd
-
SHA512
8b5f3a67279365dc6ca1a097fdbfe79b5df0a48684be614e461a3f11a86af64fce3ab4ea896bfe0f8532f75066fa6393d3ce01b4fa6d1ffdbf0f8815737437a2
-
SSDEEP
12288:qHPbmmBGt0a6lpLWGuxx0cEqvB1PmvjLfyX3ySy:qHzmm06odxLN1PGjGSd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/f9de5be5d337c16f6a3ad525011586ae0b14f04169e9b6ae61a35397a3311079.exe
Files
-
cd88bacf312e7e4b45258af81ce8048b.bin.zip
Password: infected
-
f9de5be5d337c16f6a3ad525011586ae0b14f04169e9b6ae61a35397a3311079.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 658KB - Virtual size: 657KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ