Static task
static1
Behavioral task
behavioral1
Sample
96a3709a8156268f9daaeac2aab9c66146967ef173e5d5d2e8a0ed8bde75ab63.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
96a3709a8156268f9daaeac2aab9c66146967ef173e5d5d2e8a0ed8bde75ab63.exe
Resource
win10v2004-20230915-en
General
-
Target
c6240f16924f29d562206c72eca67e5f.bin
-
Size
637KB
-
MD5
587ef94c716e8e938db6d5944d0df318
-
SHA1
07726fc805d4cb1f52eb7084d595c9bfe250af37
-
SHA256
2fe6502adc3644e737baa70de9bfc055841a75bc6df41512a41e4b53e75a5062
-
SHA512
a9d552d53d235d8f8322b736eafcf9c6dd9e7ffd9a9755354ea925e44271073edc952737e4484dea30b873152fa47bd2072b60f8a7efedce38395fc119cbf78b
-
SSDEEP
12288:XffsD4kvu2CVXOgl3jy0tssX15LZfQk8swxPg6M3IWiy/g/ra:P1Eu2CR/l3RysF/P8sUP1ZWv/gO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/96a3709a8156268f9daaeac2aab9c66146967ef173e5d5d2e8a0ed8bde75ab63.exe
Files
-
c6240f16924f29d562206c72eca67e5f.bin.zip
Password: infected
-
96a3709a8156268f9daaeac2aab9c66146967ef173e5d5d2e8a0ed8bde75ab63.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 718KB - Virtual size: 718KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ