Static task
static1
Behavioral task
behavioral1
Sample
ce5546e8bc7a298f9bd3506d36462eaf20f2d10f12605db2784f40b21d2207b0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ce5546e8bc7a298f9bd3506d36462eaf20f2d10f12605db2784f40b21d2207b0.exe
Resource
win10v2004-20230915-en
General
-
Target
50224b211dc59b0276d3c1b9df1580c1.bin
-
Size
741KB
-
MD5
d134f2e3023f3eb60be69d6cea54f466
-
SHA1
8cae453c877dab1d93efe92b40ad28ffd1f7d98b
-
SHA256
f88ab7195b7a6b37586733cdc37971f4b65554c864aebb7fb6022d232dd45e73
-
SHA512
62261fb243b2b4cb87a04addd22f70997e460b53599879386eeeb08f4b9a47fee76d5f8db71076659c7848a8b6eb1c6806535cf3486eb0651056708efbfc7ad7
-
SSDEEP
12288:IOa9ofQV9rMoeZg/fVST8CZEXOfC2w7/ApFyvHgmWyo0RkKzZFV6GCkNApc+:TiWUGlfT8CZSOfC2TyvAmxo6ZFV6FHX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ce5546e8bc7a298f9bd3506d36462eaf20f2d10f12605db2784f40b21d2207b0.exe
Files
-
50224b211dc59b0276d3c1b9df1580c1.bin.zip
Password: infected
-
ce5546e8bc7a298f9bd3506d36462eaf20f2d10f12605db2784f40b21d2207b0.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 777KB - Virtual size: 776KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 192KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ