Static task
static1
Behavioral task
behavioral1
Sample
b46b6520cae55f37a4e30a10e06439c8ddd0e9a6e4181eecb14a2c48ee2d393c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b46b6520cae55f37a4e30a10e06439c8ddd0e9a6e4181eecb14a2c48ee2d393c.exe
Resource
win10v2004-20230915-en
General
-
Target
b46b6520cae55f37a4e30a10e06439c8ddd0e9a6e4181eecb14a2c48ee2d393c.exe.zip
-
Size
78.6MB
-
MD5
73326f7b9396319d4b0b2df358052230
-
SHA1
a1fea6a3a04255921a36d8745c2d5a2d68ccea67
-
SHA256
5bae00cad6053ddb43d9e05c763396569f8b22388cf959ba1b428cd7719e4f94
-
SHA512
5371347c80cc64c6de0c4394fbbc4de6e552d261c22e0aa1fdfbdd0d40a044a644ab45f3a540ec5fd4b457fc7d187ad45da1050fefe45c58df0f74340b1448cb
-
SSDEEP
1572864:CKX7YDOcpUmLcEl0hG1oKXbYRCdBY0P3xie8gFdDGzinzerz5M:1X6OcKmL9lXE8dBYyr8yGWzeJM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b46b6520cae55f37a4e30a10e06439c8ddd0e9a6e4181eecb14a2c48ee2d393c.exe
Files
-
b46b6520cae55f37a4e30a10e06439c8ddd0e9a6e4181eecb14a2c48ee2d393c.exe.zip.zip
Password: infected
-
b46b6520cae55f37a4e30a10e06439c8ddd0e9a6e4181eecb14a2c48ee2d393c.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 80.3MB - Virtual size: 80.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ