Static task
static1
Behavioral task
behavioral1
Sample
Order # CCI-00812631-23.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Order # CCI-00812631-23.exe
Resource
win10v2004-20230703-en
General
-
Target
Order # CCI-00812631-23.zip
-
Size
615KB
-
MD5
c0f272066ddd78251d8f571b5ef86c0d
-
SHA1
f28b4535015f0044173d6c14856cf8184c5c5292
-
SHA256
3c5924e32a19477f66fccefd76a92fe2910f5f5521a8ccef59ca91ab3df8e40d
-
SHA512
fa8d71e85f076fa4045e5e739050a8a6e4cf0d2fe4ab14bbed6d1de98d4cdb73e0c412c65893e9c8e008f54bfa24c8e86badf8187fb73841e3dd85d232330337
-
SSDEEP
12288:ALnu+gvX2qQaYpvXRGcz5pCu/zRbfiUkIgmiHK9DwYJE:K7gvX2qQaM/F5v0oJiHK9/E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Order # CCI-00812631-23.exe
Files
-
Order # CCI-00812631-23.zip.zip
-
Order # CCI-00812631-23.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 643KB - Virtual size: 643KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ