Static task
static1
Behavioral task
behavioral1
Sample
c1b6a939640d928b6a41b8f188a42a68d9167434768abe20b94b74f2a632df30.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c1b6a939640d928b6a41b8f188a42a68d9167434768abe20b94b74f2a632df30.exe
Resource
win10v2004-20230915-en
General
-
Target
443015316fada7ff64578b88c26d66fb.bin
-
Size
711KB
-
MD5
2553c0c4a95a05fc69f05bf604f1f0c4
-
SHA1
caca97bf4cdc8e3ed65bf843ee786af00166b658
-
SHA256
36a265783268a514019256f72ef0e1558f994c7573ded804e209096d597ea01f
-
SHA512
a05bcd44096b804e591d646cbce6e4864c6a1d54aea3863376bfadf1a11db4cad288b21442bf5fe110a6b45c9828fd8f0f246cdedad555c636b7e5f3cb5b9586
-
SSDEEP
12288:8Q/5GaSTnEia/hmTIwswPFkgLXm8JfIVoN5hwqQf/y4aS9:8Qh7STnEia/huNPugLRJgVAlQf/y4X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/c1b6a939640d928b6a41b8f188a42a68d9167434768abe20b94b74f2a632df30.exe
Files
-
443015316fada7ff64578b88c26d66fb.bin.zip
Password: infected
-
c1b6a939640d928b6a41b8f188a42a68d9167434768abe20b94b74f2a632df30.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 871KB - Virtual size: 870KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ