Static task
static1
Behavioral task
behavioral1
Sample
323f7a2c28d21f7098817977c3854be91f379cb2791fbc5504d6c3342fb163ac.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
323f7a2c28d21f7098817977c3854be91f379cb2791fbc5504d6c3342fb163ac.exe
Resource
win10v2004-20230915-en
General
-
Target
be1b63ef6abc588245cdf4f346b26154.bin
-
Size
1.1MB
-
MD5
b6b679419b45c9ea5f806839d5cdedc0
-
SHA1
d3eaffab303175334ba1cdc18378c253afdfea32
-
SHA256
13c54364914485de5ca3a77b68c91d7827bf4b54118265d5a5d241f3063e3a10
-
SHA512
983f5fa55a3cecae199803a8e366e266dc27f2b6487ddceba6c7d19544974f8182431a5208ec0d6e497e950019da8a00d4bf3fe53c77c658a4229be3fbf812be
-
SSDEEP
24576:y2k9OUV+2RlOZTTDvq/dXakajQl7/rrrRUBjP3iTnnK5JCii/L:RQV+0lITny/Vl77RUJAnnK5JCii/L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/323f7a2c28d21f7098817977c3854be91f379cb2791fbc5504d6c3342fb163ac.exe
Files
-
be1b63ef6abc588245cdf4f346b26154.bin.zip
Password: infected
-
323f7a2c28d21f7098817977c3854be91f379cb2791fbc5504d6c3342fb163ac.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ