Static task
static1
Behavioral task
behavioral1
Sample
Update_IPDVS_Host (1).exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Update_IPDVS_Host (1).exe
Resource
win10v2004-20230915-en
General
-
Target
Update_IPDVS_Host (1).exe.7z
-
Size
5KB
-
MD5
a8016fc9cca125e7d86542b5fd99ab3d
-
SHA1
52143117d3af626d8c718eedb7b435bda4456c87
-
SHA256
85a541cddb6a216868c087f7dc8610f54c90038586f143596bf0f2542828c5ec
-
SHA512
32f1a100da3d2e047905baaf0cdf87d694b109c27e8dd4202b2a5fbe0a75db3d859085ad8bc114f0b31f3383fcd8f35c8a655c0e7b78849ce8916466017a30e7
-
SSDEEP
96:v8UEgehSUymdBbzwPD/CN2ztFd/TbjGUqCmFJwm:UUEDhjymdBbzwD8+FdbGX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Update_IPDVS_Host (1).exe
Files
-
Update_IPDVS_Host (1).exe.7z.7z
Password: infected
-
Update_IPDVS_Host (1).exe.exe windows:4 windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ