Static task
static1
Behavioral task
behavioral1
Sample
84e5beb64edd5d86e524efa857995b09d5f5f2d7e5effc974e4dfb4e4d5364ed.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
84e5beb64edd5d86e524efa857995b09d5f5f2d7e5effc974e4dfb4e4d5364ed.exe
Resource
win10v2004-20230703-en
General
-
Target
3c69c2def3695bc1a6581eeea62fe8e7.bin
-
Size
620KB
-
MD5
8d6743d67187d50890e48ad4fb6282aa
-
SHA1
6a3d9c1c4159da6522505328ecf5e51ea6d8db90
-
SHA256
bda1bca8a446b8783a6f0bf44cb982368027802ae7c8ae58ec376648c6be93cc
-
SHA512
997670f08fae20b90864ad45ca02c06d532fc234997d5b8411253280bc9991245866b874919fff29ebfc72ba75a72cc77388526ba3a09510e6d50aa43c061dc6
-
SSDEEP
12288:tZkQFnW7dTzl6Ll6asr5XYMDS1tQ/qVR4X0eMHPYG5WL2:t+ynWtz4LlZiS1tYqVST0QGsq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/84e5beb64edd5d86e524efa857995b09d5f5f2d7e5effc974e4dfb4e4d5364ed.bin
Files
-
3c69c2def3695bc1a6581eeea62fe8e7.bin.zip
Password: infected
-
84e5beb64edd5d86e524efa857995b09d5f5f2d7e5effc974e4dfb4e4d5364ed.bin.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 681KB - Virtual size: 680KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ