Static task
static1
Behavioral task
behavioral1
Sample
entry001/WER.51ebcbd8-9bd1-4d3a-92c2-0f9b9f874183.exe
Resource
win10v2004-20230915-en
General
-
Target
file_e740d1644ccf4f45aa9a3c26c0ee06b3_2023-10-02_10_37_03_187000.zip
-
Size
129KB
-
MD5
c01ca0897e17c633b63be00cc6bef688
-
SHA1
abcdbacca7c16f1fcaaaf7ca69e2536080ab15b2
-
SHA256
cbe401a00216d23dcdfac262be7fa4d0ed0d5a12a69eeedaccc43e5f607aa7a7
-
SHA512
919bed2bc8998a1ddbbd795df9c548a0fec174e5236d97e33729e6a61c8d49d9d73a0a659b2ba6eb1b71db246c57e4ba91f86a6fd14e4095615175dafdb5bee9
-
SSDEEP
3072:cobFvmny7rI3GX94bToiTPQ2ZSxk9U+XgD6O:cAmgrqPFI92gD6O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/entry001/WER.51ebcbd8-9bd1-4d3a-92c2-0f9b9f874183.tmp
Files
-
file_e740d1644ccf4f45aa9a3c26c0ee06b3_2023-10-02_10_37_03_187000.zip.zip
-
entry001/WER.51ebcbd8-9bd1-4d3a-92c2-0f9b9f874183.tmp.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 154KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
manifest.json