Static task
static1
Behavioral task
behavioral1
Sample
7b8de53f96ac0dafb7095d9daa99d7e0662707816347094f7f6ff3fe870c099d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
7b8de53f96ac0dafb7095d9daa99d7e0662707816347094f7f6ff3fe870c099d.exe
Resource
win10v2004-20230915-en
General
-
Target
0d998bbf72066582438c5558f355b0c3.bin
-
Size
499KB
-
MD5
71d66ae1a0ff68e06ceb897e8b4a4a4a
-
SHA1
25f88247a84583e321cf14dd0912145d330555bb
-
SHA256
56c5fe3d4ab2f0e3867db0c020aca666123e70933376a3c6eb5e7af475ff0596
-
SHA512
00e3ef897e2418b62df7949e0022d0495326a514847d2155d1e43511111e83d74683309e96ff1c64c8c938c4488890e26212c866754d73243d4a293634686022
-
SSDEEP
12288:yoF22ryBo3ydTiF5G/azHTgUofQpEqhvVdcanmAkKMesAt/:DfryBtiF5g8UNIBhN+a1x3t/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/7b8de53f96ac0dafb7095d9daa99d7e0662707816347094f7f6ff3fe870c099d.exe
Files
-
0d998bbf72066582438c5558f355b0c3.bin.zip
Password: infected
-
7b8de53f96ac0dafb7095d9daa99d7e0662707816347094f7f6ff3fe870c099d.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 584KB - Virtual size: 584KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ