Static task
static1
Behavioral task
behavioral1
Sample
459a598dde1bffee178de7ad5f3ad91be57c5546c5ceaffd33de873a49f90b2f.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
459a598dde1bffee178de7ad5f3ad91be57c5546c5ceaffd33de873a49f90b2f.exe
Resource
win10v2004-20230915-en
General
-
Target
4aa00992fe2da5cb2ad74b1a51749b5a.bin
-
Size
2KB
-
MD5
b35f560f32e7445675d89b59b5f4685d
-
SHA1
3829b78eccba8f90d6fca0c843f3cf3c6d4218bc
-
SHA256
58e0f09c27197493bae3ffa216413d9f791dd26c91fb73f48251f7d0320c2622
-
SHA512
83aba70452722ae9e39dd2e4b8d2400c8b5b145b06b533a23ea2f92102e697d0fff6d3dfca6ff3c1aa4ff45042eb3bef5666160e14f56969eaf45c843f57f5cf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/459a598dde1bffee178de7ad5f3ad91be57c5546c5ceaffd33de873a49f90b2f.exe
Files
-
4aa00992fe2da5cb2ad74b1a51749b5a.bin.zip
Password: infected
-
459a598dde1bffee178de7ad5f3ad91be57c5546c5ceaffd33de873a49f90b2f.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ