Static task
static1
Behavioral task
behavioral1
Sample
8fa0588a7d0bdc6ed5cd187ab077cdfed96f0cb1341b37e5000a5a40bbc7345e.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
8fa0588a7d0bdc6ed5cd187ab077cdfed96f0cb1341b37e5000a5a40bbc7345e.exe
Resource
win10v2004-20230915-en
General
-
Target
8fa0588a7d0bdc6ed5cd187ab077cdfed96f0cb1341b37e5000a5a40bbc7345e.zip
-
Size
166KB
-
MD5
cdb8442ef329f1cce8e6e946c3323c7e
-
SHA1
0da32507b2d6a7b885d6083e2fac9883a6a00478
-
SHA256
4343db61e059b8f73e97e022907d917a6a495439cf9ef7c618a832ded1f9f4d1
-
SHA512
d05877897af51ff2d062b6069f07ec87a411a6887dc84f070b168bfb69cf089a45dc1d65009a5107df926bb4238c9d7747b910a7801686c8250e6e5c8d34d70e
-
SSDEEP
3072:pgAfoMcj+2MZ6qGe68u2EZNVXvYImr1uX8Kp76aOKPvdkYAmK442tBB1SGIkS:pzAvIQne/u2+/Y/rwZpmaO4bp42tBBI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8fa0588a7d0bdc6ed5cd187ab077cdfed96f0cb1341b37e5000a5a40bbc7345e
Files
-
8fa0588a7d0bdc6ed5cd187ab077cdfed96f0cb1341b37e5000a5a40bbc7345e.zip.zip
Password: threatbook
-
8fa0588a7d0bdc6ed5cd187ab077cdfed96f0cb1341b37e5000a5a40bbc7345e.exe windows:4 windows x86
Password: threatbook
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 296KB - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ