Static task
static1
Behavioral task
behavioral1
Sample
1c2cd12a2898ab0dbad796aef237fc205e0888f366f2099ddf2236b3830318cc.exe
Resource
win10v2004-20230831-en
General
-
Target
1c2cd12a2898ab0dbad796aef237fc205e0888f366f2099ddf2236b3830318cc.zip
-
Size
521KB
-
MD5
de1c7df31062ab38f679b2859300c74f
-
SHA1
5292ed1c2054cd2c64ee0e96d09c91da57edc21e
-
SHA256
40159a952c69231f544b8aeacc4ea5d7d4f3460421656df001d46b51227ff675
-
SHA512
09bd27df9942be01f02b75a0b77d43e6efa09486c98be3f130e126a89f9b4a10128260a6e9ce7ca5018dedbbdb9b719d683d45d0c0687688a3dd54cff395e869
-
SSDEEP
12288:bDtoj78KE4uZstI0h1Y0jA3W21buxWXvyYydj2C/JtavfwvnrRt:bDt07VEjZQ1tjV21buEy1dbJccntt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/1c2cd12a2898ab0dbad796aef237fc205e0888f366f2099ddf2236b3830318cc.exe
Files
-
1c2cd12a2898ab0dbad796aef237fc205e0888f366f2099ddf2236b3830318cc.zip.zip
Password: infected
-
1c2cd12a2898ab0dbad796aef237fc205e0888f366f2099ddf2236b3830318cc.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 576KB - Virtual size: 576KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ