Static task
static1
Behavioral task
behavioral1
Sample
96716d490f2357faf8ebb019edb959af47c06b94c51a8852b2b15b2cd3022c56.exe
Resource
win7-20230831-en
General
-
Target
6a4e90565b00a175a7f721785c103b8c.bin
-
Size
107KB
-
MD5
f929856da9ca53857df160f2f4d198d6
-
SHA1
c1b328e2a1cd419763ea2a87ff24ba54dd8f3964
-
SHA256
ce0758d90ed99b335de32425e8472032ccf5f65e40577c49fb703b9e42db54ab
-
SHA512
65d64104d9b116a8432a6726de5ed1f8a141e8d2d4bee7988745a03e5c5d0ab771568e4bc76d3be541ab312384bcb02fdd03d14577313b280fda2f7fc6ef69bb
-
SSDEEP
1536:ooj5OVb+8G2DxVPbf62EO+aMkJ0B345JP0C2rFSO4Xe5EiluD3GI866FTLgtl:D5srxVGg+aMkJq47O4u5E4bI8NAl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/96716d490f2357faf8ebb019edb959af47c06b94c51a8852b2b15b2cd3022c56.exe
Files
-
6a4e90565b00a175a7f721785c103b8c.bin.zip
Password: infected
-
96716d490f2357faf8ebb019edb959af47c06b94c51a8852b2b15b2cd3022c56.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ