Static task
static1
Behavioral task
behavioral1
Sample
1e58093d8f9fbd98920435ef868b14e507c33b137b2f9d415f250334db8c2d65.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
1e58093d8f9fbd98920435ef868b14e507c33b137b2f9d415f250334db8c2d65.exe
Resource
win10v2004-20230915-en
General
-
Target
6281c6036312d97154024e12f8b99ae3.bin
-
Size
544KB
-
MD5
cce076e83ced378e18b142a3ea21e842
-
SHA1
816bc6a244923e96f8eceabdda682442f257de5c
-
SHA256
c3f27cddff700f76873d9127a5798d1322afbc063e349265bb3f86545e056d39
-
SHA512
b056e9fcef5b5540760f0c18c73b86b0392d252affac90a233a7a6eda2eb70f95ca69a056fbd0e2d5f625bc5db9178de1066954653b1ec4ebf41103418d03945
-
SSDEEP
12288:mVsR/EuNCZqUhSS1UDV3GmmXi6IOA3UydNcTBZLCBGECszCap/p:5BNCZqnSyDV37ei6FwcTBNgR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/1e58093d8f9fbd98920435ef868b14e507c33b137b2f9d415f250334db8c2d65.exe
Files
-
6281c6036312d97154024e12f8b99ae3.bin.zip
Password: infected
-
1e58093d8f9fbd98920435ef868b14e507c33b137b2f9d415f250334db8c2d65.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 816KB - Virtual size: 816KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ