Static task
static1
Behavioral task
behavioral1
Sample
93a68fc550810812a2ca3b2eab316e7e0093f29eb643c1f295e48bb09ae7be05.exe
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
93a68fc550810812a2ca3b2eab316e7e0093f29eb643c1f295e48bb09ae7be05.exe
Resource
win10v2004-20230703-en
General
-
Target
e4af3dee89d5f8dabe318c2f54437100.bin
-
Size
571KB
-
MD5
061ddcdc0f8a610f7a639308fa7644d2
-
SHA1
1f2cdf058e85dac16b728006c5754d297500bd8c
-
SHA256
a39bf462b42e6a0fb40869f1b6fcbae0149a45f2b0d83dd34c0d83c69543f2c9
-
SHA512
5ab1ee446a0343ae12de88c299f4d5350379731c2c0d5cfb6840a1230e1ba5087beb231e7ae838886df6307c4613618d5266d9d5644c0132ad1d7f295a4d7e55
-
SSDEEP
12288:fgiOrBnf710KXAaxZOFk5fTvioxEASI/RR6zU4p6eza/c1w:Ho1f7DwaPSk5fTaoHf4wezw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/93a68fc550810812a2ca3b2eab316e7e0093f29eb643c1f295e48bb09ae7be05.exe
Files
-
e4af3dee89d5f8dabe318c2f54437100.bin.zip
Password: infected
-
93a68fc550810812a2ca3b2eab316e7e0093f29eb643c1f295e48bb09ae7be05.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 677KB - Virtual size: 676KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ