Static task
static1
Behavioral task
behavioral1
Sample
0b26021f37f01f00cc6cf880bd3d7f68.exe
Resource
win7-20230831-es
General
-
Target
0b26021f37f01f00cc6cf880bd3d7f68.7z
-
Size
9KB
-
MD5
26cc428abfe63e7eebef5c22bd701108
-
SHA1
99795f58b6a603e490431a2c73b9cc623de522bb
-
SHA256
a710d2d7265ca5678a6e4f96d174d9d02982c64640b5d5fcdba99831b1a83ac6
-
SHA512
2a72ec43f76eb0b2586d0b56a9ccc96825fb3bb42ee625873b59ff4ddc4360ca7cb736c5d3334cad42773931e2a498aac8a95bd8b09fcc894b3d360be06b8dce
-
SSDEEP
192:VaZi0ePyMQXN37qFVwBA/eIdRDq02oTFC2sjQ/47zXHX0552KwCb:XqMGBA/5dRDq02oB5/kXXAEhCb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/0b26021f37f01f00cc6cf880bd3d7f68
Files
-
0b26021f37f01f00cc6cf880bd3d7f68.7z.7z
Password: infected
-
0b26021f37f01f00cc6cf880bd3d7f68.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ