Static task
static1
Behavioral task
behavioral1
Sample
POTT230901-1/POTT230901-1/POTT230901-1.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
POTT230901-1/POTT230901-1/POTT230901-1.exe
Resource
win10v2004-20230915-en
General
-
Target
1111.7z
-
Size
572KB
-
MD5
255532397f23f765014f9a5065e6da6f
-
SHA1
1cdc08f04856ca897648ee8ceac9f4f871946064
-
SHA256
8371b7be7dcc1525e4f3c21138588e157e8241dbabea455ccf29499fdd8a7d81
-
SHA512
d86547c91240017651a99a08a22b3675799f7f167f3d115761b049e32e6c399cda0c7ab0a4bacc750bb856f18f3b50f6a7bbaeb839a2ab9c71fa5d123ba187d7
-
SSDEEP
12288:aRe/qw3Qvz6ULX/wf6PfDkhaIbigUFo5Is58Alq:aM/qYRUj/ESAha6F7v8Alq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/POTT230901-1/POTT230901-1/POTT230901-1.exe
Files
-
1111.7z.7z
Password: infected
-
POTT230901-1/POTT230901-1/POTT230901-1.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 617KB - Virtual size: 616KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ