Static task
static1
Behavioral task
behavioral1
Sample
218eedeec9c3485bce17c4b42331bd00fc0a43f9975e5902c997b0c6509f4f51.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
218eedeec9c3485bce17c4b42331bd00fc0a43f9975e5902c997b0c6509f4f51.exe
Resource
win10v2004-20230915-en
General
-
Target
a07510c83937ec65ecb42ed890e7bfb4.bin
-
Size
649KB
-
MD5
67d040998b16dfd6e2c5bfd3ee7ef086
-
SHA1
901eb76f4da35f0f85016dba656dbcdb25df90b9
-
SHA256
d40d925a615cd818029c3d2feecffa2439e72acb30f8df343ac87267b2afd34e
-
SHA512
20a4fcfb886e99b004fc4729da11b3d65500330a5b04c0fd54452f081e55bdc0504f3fc2eb45505cc38d4c720cd622158c176af74deac3290006b59cf7a12a40
-
SSDEEP
12288:0l9GXrhaolHxGstUjF2Z+eH0ZYRQtJ/aKhgRjf1SqZ5OH8XUwNCMbrpp8a0RC2:0mXtasRGcZ+/SQtYKKRn52QR1fcC2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/218eedeec9c3485bce17c4b42331bd00fc0a43f9975e5902c997b0c6509f4f51.exe
Files
-
a07510c83937ec65ecb42ed890e7bfb4.bin.zip
Password: infected
-
218eedeec9c3485bce17c4b42331bd00fc0a43f9975e5902c997b0c6509f4f51.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 670KB - Virtual size: 670KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ