Static task
static1
Behavioral task
behavioral1
Sample
0bad435ef682e5eb34126719a3684ac718fbace8742df2b088c0284d14117fa3.zip
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0bad435ef682e5eb34126719a3684ac718fbace8742df2b088c0284d14117fa3.zip
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
0bad435ef682e5eb34126719a3684ac718fbace8742df2b088c0284d14117fa3.exe
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
0bad435ef682e5eb34126719a3684ac718fbace8742df2b088c0284d14117fa3.exe
Resource
win10v2004-20230915-en
General
-
Target
0bad435ef682e5eb34126719a3684ac718fbace8742df2b088c0284d14117fa3.zip
-
Size
490KB
-
MD5
3b2ac785f244da4c954152177e7f8b2b
-
SHA1
42b7c265b4ac2b6c1b30e9140aaa272876723c65
-
SHA256
68e56b47b13311bd1014c7242387a5cfa5b7870a85b65032c5b287deab598ce6
-
SHA512
a1d07fe690fca4c51389dc50d501c6b51b527c9eb1ac3449bf01e1835a2f15fe35d2d1e7edc72ad4ab879c8db7fb1c5c4f7e89cf33469651085c76be59a6ff44
-
SSDEEP
12288:2boWzY1y2lYZCVXIh+9Ip4m01kW+VBadhxZwuuT2Aumvr:2Ysdjw95yW+V0dDZwl24
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/0bad435ef682e5eb34126719a3684ac718fbace8742df2b088c0284d14117fa3.exe
Files
-
0bad435ef682e5eb34126719a3684ac718fbace8742df2b088c0284d14117fa3.zip.zip
Password: infected
-
0bad435ef682e5eb34126719a3684ac718fbace8742df2b088c0284d14117fa3.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 487KB - Virtual size: 486KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ