Static task
static1
Behavioral task
behavioral1
Sample
51d4a0ca42b1a0d5e63310e8872a7ecd9ed3046e9c72ef9d15d01b02b782c1ef.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
51d4a0ca42b1a0d5e63310e8872a7ecd9ed3046e9c72ef9d15d01b02b782c1ef.exe
Resource
win10v2004-20230915-en
General
-
Target
e02c5a17407e5b9094a1d433e52d451d.bin
-
Size
5.6MB
-
MD5
1cab52e74d83b53997d2f9a006609e65
-
SHA1
ee1e1c873182dba9a09642255cc029e0c9c5a291
-
SHA256
1278577dfdc2f25c8a15ad962ed14f28015a0cb90be707add57c72193cfa466f
-
SHA512
b94724382df1a01f7719ce5f79ae69eb3982fa1278f0362d0bd9f49a9ba0c13f8be29ff4ee79c5673f8966bd978a0c2c5e97a5fbec09a80bd8c33e96e783ca5b
-
SSDEEP
98304:RcWDdGcDe5KpoHMoob2xOq8HMijHlecqNRoeG47ScUQSQUZo7gimNBGIiGscAuQ3:CWDnDbpk22xODhblUHBWcUKZmN8Gs4Q3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/51d4a0ca42b1a0d5e63310e8872a7ecd9ed3046e9c72ef9d15d01b02b782c1ef.exe
Files
-
e02c5a17407e5b9094a1d433e52d451d.bin.zip
Password: infected
-
51d4a0ca42b1a0d5e63310e8872a7ecd9ed3046e9c72ef9d15d01b02b782c1ef.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 11.9MB - Virtual size: 11.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ