Static task
static1
Behavioral task
behavioral1
Sample
0ae154719727ef47be50e984788e161fdd454ecac7b226028242305f3093fdba.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0ae154719727ef47be50e984788e161fdd454ecac7b226028242305f3093fdba.exe
Resource
win10v2004-20230915-en
General
-
Target
eeeb7261374c5b09ee72ddef72a1e3fe.bin
-
Size
285KB
-
MD5
9a0cc5e28ad2618db7e10c5c97d02ad9
-
SHA1
4aa28f4df88a557e4f52bea7287f9d92bcf5bef9
-
SHA256
56df3fe26dd59a83e9b1335da71ede547d1bb0196f29314f61b7631a6e7ddc29
-
SHA512
90667abd8db23e4448b45e8393c9454a6ddc551e670fc8cfc8d0883c35c59117b02aa698c4c6e6ce4a16160879e6bebe24dc6b10cdef0155b4ac83e041dffe4d
-
SSDEEP
6144:qookozy0XZKp541hofeyqJn4ElC7GvVGKFQgv6KcGNO75CBD3QS:ZRIyeopqIe5lKGvVpQgv67Gz5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/0ae154719727ef47be50e984788e161fdd454ecac7b226028242305f3093fdba.exe
Files
-
eeeb7261374c5b09ee72ddef72a1e3fe.bin.zip
Password: infected
-
0ae154719727ef47be50e984788e161fdd454ecac7b226028242305f3093fdba.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 282KB - Virtual size: 281KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ