Static task
static1
Behavioral task
behavioral1
Sample
e215e9e90f3aa064ca0df91993ab91f086fe918e72c05de21307b75b1cd164ec.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e215e9e90f3aa064ca0df91993ab91f086fe918e72c05de21307b75b1cd164ec.exe
Resource
win10v2004-20230915-en
General
-
Target
73621af47a6b6943527d85fda07b3bc6.bin
-
Size
624KB
-
MD5
8a31b1e024e5f3dbacdfbd9bd5c588a8
-
SHA1
c7ee0b52ff5753fd8f3e9176296dc1c8606fa019
-
SHA256
9e227e0da3f5934e42c0d7b56c4d46e21a1ff1f9835604a86dbf5a3c2483ff23
-
SHA512
57e6c9059e0e120f4a1d3c2a77f13796d983b907e2b3292de4a465e6e8a212e8eb57338136b1f38a34693dad28bae7ad1689ba16e623268411d8d68e53605391
-
SSDEEP
12288:NNq3Tdzx/8uv0Lth7cYojXCzEXINcTKnbQ6QvHYw4M0j0xN4GeNxzw:TOJx/8XSkT1nc624w4M0dGeNu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/e215e9e90f3aa064ca0df91993ab91f086fe918e72c05de21307b75b1cd164ec.exe
Files
-
73621af47a6b6943527d85fda07b3bc6.bin.zip
Password: infected
-
e215e9e90f3aa064ca0df91993ab91f086fe918e72c05de21307b75b1cd164ec.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 868KB - Virtual size: 867KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ