Static task
static1
Behavioral task
behavioral1
Sample
6d8070624c9a9acdd20093644d4baa5481bb5a3e9ccc113e6a140bd721808585.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6d8070624c9a9acdd20093644d4baa5481bb5a3e9ccc113e6a140bd721808585.exe
Resource
win10v2004-20230915-en
General
-
Target
826ff38ec54dc344e3d75ce5f5c916c1.bin
-
Size
578KB
-
MD5
9224f1be8ae9ae32c5e873150c9a1226
-
SHA1
eaac80e9da5f9b3caf99d27aa362574172727dc3
-
SHA256
6c4f3419877ce9411ad7b45f3bc08cf8a08cd9774e9b2bf3669b86a41e769f32
-
SHA512
5d1f45fdf41d2a5bb3c290e1a09e04a60ba80a89c1326dcfc405af997401ddac4f41f612c90fe5763f01ccc0e0c82c737b5f32f2a411a716e923a73b55d35854
-
SSDEEP
12288:X/6JSd4lcPcyGAkoHVYB5J39gNmXWtWqbmbOpY/sRiFI9q/zzy:XFd7pvXYltgpWqb5q9I9qXy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/6d8070624c9a9acdd20093644d4baa5481bb5a3e9ccc113e6a140bd721808585.exe
Files
-
826ff38ec54dc344e3d75ce5f5c916c1.bin.zip
Password: infected
-
6d8070624c9a9acdd20093644d4baa5481bb5a3e9ccc113e6a140bd721808585.exe.exe windows:4 windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 601KB - Virtual size: 601KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ