Static task
static1
Behavioral task
behavioral1
Sample
2d6e7743faefeb63c95139c45667ccc535c87fcb5956df2d5381887e15bc59f0.exe
Resource
win7-20230831-en
General
-
Target
af0b7c8d5a69857c46ee2436b461df1a_JC.bin
-
Size
717KB
-
MD5
d83ed17df707367a026821a28f8d5428
-
SHA1
efa30253e64e36254079ad8cb5b4aa83e579dc0b
-
SHA256
b0b6c5abb997c1e82d0c135121f072adce81b5d54870c05d4c5fbee85e711211
-
SHA512
b1b001e974a398c5b030e59a6360cf82e9bafaaacce6db0245937c90c8617e4fe51ae24b81816a754a4852158b0a0db5fdf2b9915140b7d888b9fb21ffdecf60
-
SSDEEP
12288:+2FEZdic9i0GnnoXbfrYkNXEjLlZmQnYPVB6/QEmHLKRP0Wfm0a8LOONPqhA:+2FE2Si0Gn0TrLZafmAYZHLaP0Wfra3m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2d6e7743faefeb63c95139c45667ccc535c87fcb5956df2d5381887e15bc59f0.exe
Files
-
af0b7c8d5a69857c46ee2436b461df1a_JC.bin.zip
Password: infected
-
2d6e7743faefeb63c95139c45667ccc535c87fcb5956df2d5381887e15bc59f0.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 953KB - Virtual size: 952KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ