Static task
static1
Behavioral task
behavioral1
Sample
AJG2023031161.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
AJG2023031161.exe
Resource
win10v2004-20230831-en
General
-
Target
c8cf984910c46c90d29e0f64ec1f61eb.bin
-
Size
350KB
-
MD5
258b8230519f8fbeab15bdf07c416a9a
-
SHA1
49750ee59a54e54e33ca6e66659f4ed79341be82
-
SHA256
58b2d5dbf53db6c56cbf1e30d8da16ce61ce07c7dad47190b46604029794695d
-
SHA512
987a8e9127349a98b6c5043734c3b851cf20b8f143807dace43e2c841c7a56a2fb1f55144d184cea208cb31acd7bcffa3771d2a56ba81fb1612e9b9889f04ead
-
SSDEEP
6144:NM3c2TWYQilgIQfFWg4uCIpCfJ/sr/5O7Wu7jtx443ZDs2jimJGMAcxZ:Ny4YrlgIQfkg4hIpsls/Vutx4CDHStc/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/AJG2023031161.exe
Files
-
c8cf984910c46c90d29e0f64ec1f61eb.bin.zip
Password: infected
-
31c78ac3b25d1abf7932ca71a93ca368e5f9116b7ed2874cef40655ebc09783d.zip.zip
Password: infected
-
AJG2023031161.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 849KB - Virtual size: 849KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ