Static task
static1
Behavioral task
behavioral1
Sample
8dee64363a078fefac0ebda6136979e006bebc231ff17a99cc56c352d3dd1951.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
8dee64363a078fefac0ebda6136979e006bebc231ff17a99cc56c352d3dd1951.exe
Resource
win10v2004-20230703-en
General
-
Target
8dee64363a078fefac0ebda6136979e006bebc231ff17a99cc56c352d3dd1951.zip
-
Size
5KB
-
MD5
28840a9e6b78e95162b6680cc51c8baf
-
SHA1
47dd55b1037913ce8dea609cc83107ca9f730e07
-
SHA256
4fe20e396819a51a755305b7a0a4b4dd4581086c27baf9db54324ce401cc128c
-
SHA512
324f6d74b8aa51783099b7a08f3dad647c1750b85c773f06b34868773bab84cf1e282b3a6f88c942471d8334f23ddbe33c0ba3fe8de6e22e742ac60ce35ca0e3
-
SSDEEP
96:zzoYMxkcM5PMB2XK6IS6ura34BHskOAWY5V2b11iE/Jkh+1QOMn4Y6M2gal75GDB:XoTqiB2XK69AyoxRbniEhkw1QOTM2gag
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8dee64363a078fefac0ebda6136979e006bebc231ff17a99cc56c352d3dd1951.exe
Files
-
8dee64363a078fefac0ebda6136979e006bebc231ff17a99cc56c352d3dd1951.zip.zip
Password: infected
-
8dee64363a078fefac0ebda6136979e006bebc231ff17a99cc56c352d3dd1951.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
*H}>Q Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ