Static task
static1
Behavioral task
behavioral1
Sample
9767ad01a52ecc0e0118d679e289e3d100f84c7883808d2b9509c69dffd87026.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
9767ad01a52ecc0e0118d679e289e3d100f84c7883808d2b9509c69dffd87026.exe
Resource
win10v2004-20230915-en
General
-
Target
9767ad01a52ecc0e0118d679e289e3d100f84c7883808d2b9509c69dffd87026.zip
-
Size
503KB
-
MD5
8b0c4cd49ca1972d752a31d3bb37b528
-
SHA1
4a9c77fcfb0f1249d27196b1b7fd8b356358ca9a
-
SHA256
2529d530fc635fee8283231adc1083bbc699b4f671ca7a453c2a3f0fdd94ea45
-
SHA512
a9cb42935d3f5911b3470925fe22eaab83a274f30308af1c5e8806148736d6bebb33d2b85d5a5a7e7bae1492b42fb62e95ac66ab861ffe9c88e139f76a2c0fc2
-
SSDEEP
12288:OX7j10lJcjGEOdNHueYYhhDWFoVH/2xi+IJzqewd1ScOPFRFIGP:OX7cWGX/Oe13exLemea1rOP+GP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9767ad01a52ecc0e0118d679e289e3d100f84c7883808d2b9509c69dffd87026.exe
Files
-
9767ad01a52ecc0e0118d679e289e3d100f84c7883808d2b9509c69dffd87026.zip.zip .ps1
Password: infected
-
9767ad01a52ecc0e0118d679e289e3d100f84c7883808d2b9509c69dffd87026.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 539KB - Virtual size: 539KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 186KB - Virtual size: 185KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ