Static task
static1
Behavioral task
behavioral1
Sample
9ee8e3c42c5afd846583fe6bfe8fff9b23fc4488c9fadecf41bf56249841c61a.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
9ee8e3c42c5afd846583fe6bfe8fff9b23fc4488c9fadecf41bf56249841c61a.exe
Resource
win10v2004-20230915-en
General
-
Target
12e1ada93a7a71db224b28693b2661cc.bin
-
Size
908KB
-
MD5
17b7349dbcdece02278c7c994f9e61f8
-
SHA1
06bba887e0310b42e17d8fb97cf9ad9e694106ba
-
SHA256
116d4f1ecac998b822e5a473cffc8a03c0a6965cbb3649f61465427a656ad6d0
-
SHA512
b5032a253eb274509806d92de8611d37c73c41b91a197ddd4dc9484b37c00b4776a1d3cfaee560574a126aa38ed5372d09195da06c3cf8c38ec21ba1803a49d6
-
SSDEEP
12288:yYhK8cPuiF5ScWgiose57Ybl2TADCjMbbCQQJPS1WmY6O3SOLVDcaIGYHumdxr4g:5hK5PRMgiP08DhgSg6UcpHumdxia
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9ee8e3c42c5afd846583fe6bfe8fff9b23fc4488c9fadecf41bf56249841c61a.exe
Files
-
12e1ada93a7a71db224b28693b2661cc.bin.zip
Password: infected
-
9ee8e3c42c5afd846583fe6bfe8fff9b23fc4488c9fadecf41bf56249841c61a.exe.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�=0 Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�=1 Size: 912KB - Virtual size: 916KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�=2 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE