Static task
static1
Behavioral task
behavioral1
Sample
3456c2a7591872eeebcc78dc3c1b54b04ad66492db43429fd6bdca1dc8595684.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
3456c2a7591872eeebcc78dc3c1b54b04ad66492db43429fd6bdca1dc8595684.exe
Resource
win10v2004-20230703-en
General
-
Target
bcc6ebddb86efdcce490348a0c45cb16.bin
-
Size
664KB
-
MD5
e6385efe4bf5976ee0857b39cc834fa6
-
SHA1
05bc4b8904568d8d1467e4c76f08020cf2abfb18
-
SHA256
aad21cba016e57aa403411d701fed65e9f8d02ebf8cbcdc795e448f7ea690520
-
SHA512
fa446889ce46de076207361502c3eaf582f73d43f34a9503a72968014b538cde6a18c8e8e74a427fae4341cc6d4310cb0e2bbf33675064a94995afdf9b7b2b03
-
SSDEEP
12288:9x85g683qgwt8GtV2zRfuR3o9EEQRk9OQWARCUYNg0fzyyJIyZtX:36gogetVCI35EQRkEQ/RCBNg0fGyOyZR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/3456c2a7591872eeebcc78dc3c1b54b04ad66492db43429fd6bdca1dc8595684.bin
Files
-
bcc6ebddb86efdcce490348a0c45cb16.bin.zip
Password: infected
-
3456c2a7591872eeebcc78dc3c1b54b04ad66492db43429fd6bdca1dc8595684.bin.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 751KB - Virtual size: 751KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ