Static task
static1
Behavioral task
behavioral1
Sample
ʽϸͼdjp2222222222222222222222223333333333333333333333333333333333333333.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ʽϸͼdjp2222222222222222222222223333333333333333333333333333333333333333.exe
Resource
win10v2004-20230824-en
General
-
Target
eb143c0d8e636f433a37f87fa4f03eecba0ace4a60e242fceeb278093ce456ca
-
Size
9.9MB
-
MD5
3c259ad6718e888d8591d1b04bad6283
-
SHA1
fe74d974a82a4528917adbb6b64a2c81fa9e027b
-
SHA256
eb143c0d8e636f433a37f87fa4f03eecba0ace4a60e242fceeb278093ce456ca
-
SHA512
a953a1802137faefd5d7efee6f3280f758b6aeaf4e427ac20320e1e6fd43bcfdc030669b5657574fdb004e22c1516b9083d835a7a2029c0b48626da1af099e31
-
SSDEEP
196608:5ShWQL+LN7hvLZIrkQPAk8RBWEkF7lC+L1kzWGuQPGmHpVcawILyGIpt:PEwNEAMAPBWljrRkyCyUyvv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ʽϸͼdjp2222222222222222222222223333333333333333333333333333333333333333.exe
Files
-
eb143c0d8e636f433a37f87fa4f03eecba0ace4a60e242fceeb278093ce456ca.zip
-
ʽϸͼdjp2222222222222222222222223333333333333333333333333333333333333333.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 30.1MB - Virtual size: 30.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 494B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ