Static task
static1
Behavioral task
behavioral1
Sample
9103e2815438759a349705607f3be586c2129551e74cd2a875a04faab7ac43a9.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
9103e2815438759a349705607f3be586c2129551e74cd2a875a04faab7ac43a9.exe
Resource
win10v2004-20230915-en
General
-
Target
5313272fd87d44ac3b60e976db857d49.bin
-
Size
878KB
-
MD5
d7861d795257470653a2ad3aef5406f7
-
SHA1
2391451fbdcf87187e853aa91ea35254e645ac94
-
SHA256
f15c0d27e7abd6583263713cb579c807b677e43a7ae20698aeeb754f5f412203
-
SHA512
f191b2f20c621e7b19b30701a78d8b76320abd23001db923f7a7727e48ff7bec9e1b5c55f202540e6918f89f4a2670d3170e51a6b1661ed9d0214bd7d07759ab
-
SSDEEP
12288:VvUdgm6qQcoxg9tlwfqngcZL3mDqgPlCSs3LaGDJZRkC6kn4wzCQjk+9PZ5e8:1Cr86Nngcdvmyf731zCQI+9x5e8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9103e2815438759a349705607f3be586c2129551e74cd2a875a04faab7ac43a9.exe
Files
-
5313272fd87d44ac3b60e976db857d49.bin.zip
Password: infected
-
9103e2815438759a349705607f3be586c2129551e74cd2a875a04faab7ac43a9.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 909KB - Virtual size: 908KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ