Static task
static1
Behavioral task
behavioral1
Sample
d4b306e65c16a66f2c0851d70709f117d2a93596fa9ad5905f99c99ea25aba10.exe
Resource
win7-20230831-en
General
-
Target
15e76febd9a13cf44e211849c051a68c.bin
-
Size
716KB
-
MD5
1da95f30ba1c9aeb1beb089ead9ecfe4
-
SHA1
d3c6c4aadd1b7eb8c2a0bca4d8af9ba96310ade4
-
SHA256
3263ed6eeca96b2ddda2feae33ef395a12e61db0adfb85137aa3d12f15aed285
-
SHA512
0a5078d3b1071d2cf668441cc092284103e22ffdbb14790056a8a1c9cc299dbe54fcad5ebf3b6a8f479b4af12572ae0b7d89a11acf1cd53f62d3a15a71ca5252
-
SSDEEP
12288:4bK8JGDTccpmq2tXjRzxEc1t3CgcKjz3Dywfz08gStLeMQNVPj+2N:4b5IPpmFXRxMKjz3DJz05SZcrb+G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d4b306e65c16a66f2c0851d70709f117d2a93596fa9ad5905f99c99ea25aba10.exe
Files
-
15e76febd9a13cf44e211849c051a68c.bin.zip
Password: infected
-
d4b306e65c16a66f2c0851d70709f117d2a93596fa9ad5905f99c99ea25aba10.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 952KB - Virtual size: 952KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ