Static task
static1
Behavioral task
behavioral1
Sample
2c1c171db85455aa2676e02693c8a9b7d62055fee843a17097dba29915637acf.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2c1c171db85455aa2676e02693c8a9b7d62055fee843a17097dba29915637acf.exe
Resource
win10v2004-20230915-en
General
-
Target
2c1c171db85455aa2676e02693c8a9b7d62055fee843a17097dba29915637acf.zip
-
Size
22KB
-
MD5
f655e664386d873241ea6fbe0ea367eb
-
SHA1
0d67f953ff393436b47bed4978d802c71a43c7b9
-
SHA256
3fb019af6e4bf50e14065fbcdd79d2577c8ccff6e3e14e0fd6f1efb269237504
-
SHA512
d75f690e95cefb98763612984b99a6d944f024560fb1495cbceacc4fa88e7f76c98bd70495d913ccfbda096cee16107e0c67a338f11aa3cf4063a2349e95a642
-
SSDEEP
384:O1e10WSeMlBxhQWVfaLmIYVVdX/yaimsqxDmMkFly4zUx5GKuUZgz0hS7n1:O1XkMlBxhQWVCK3dX/sqx6pXySc5eGgD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2c1c171db85455aa2676e02693c8a9b7d62055fee843a17097dba29915637acf
Files
-
2c1c171db85455aa2676e02693c8a9b7d62055fee843a17097dba29915637acf.zip.zip
Password: infected
-
2c1c171db85455aa2676e02693c8a9b7d62055fee843a17097dba29915637acf.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ