Static task
static1
Behavioral task
behavioral1
Sample
54a4835f819094c8318efd84be088c0d37c81cb595da640bd563e5e8f4fa378d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
54a4835f819094c8318efd84be088c0d37c81cb595da640bd563e5e8f4fa378d.exe
Resource
win10v2004-20230915-en
General
-
Target
102d946104a6c2823990eaf72594d66c.bin
-
Size
590KB
-
MD5
814121294aa1f921311643d32b2a1bce
-
SHA1
560019c4cccb3e9e99f78addc4935c93288d917b
-
SHA256
7acae9893e946b638e5937d9d105e2a8291a1132d093d1fe81230feed37c8422
-
SHA512
8dfea6974d08a6e91b614d19a1b8fa4a1f76ef72699c4d5f2d86a3f03146f81bcddc52c88410ca8edaa7e7dea5b30b5270167bd10335586f0733ec82d4547c6c
-
SSDEEP
12288:Lw2h+clZEDxRIDCUH1k9STwJYEoTMxXEg1oUAe0wOKqtLQGg8CUk:Lw2RvqxRrUHn0YDMxXEg1oUfOKqpQKk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/54a4835f819094c8318efd84be088c0d37c81cb595da640bd563e5e8f4fa378d.exe
Files
-
102d946104a6c2823990eaf72594d66c.bin.zip
Password: infected
-
54a4835f819094c8318efd84be088c0d37c81cb595da640bd563e5e8f4fa378d.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 647KB - Virtual size: 646KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ