Static task
static1
Behavioral task
behavioral1
Sample
9dc3ae76e486e42a37e14a3097fa056b5b85d037bf0d00c400330b514059ed84.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
9dc3ae76e486e42a37e14a3097fa056b5b85d037bf0d00c400330b514059ed84.exe
Resource
win10v2004-20231020-en
General
-
Target
9dc3ae76e486e42a37e14a3097fa056b5b85d037bf0d00c400330b514059ed84.zip
-
Size
675KB
-
MD5
40989cffbdd8c89009b7a5e1eeb94de8
-
SHA1
e44f0f6cc7cb070fcdf800d768469e5e42157139
-
SHA256
2a97ca33a5ae240b8e6f3bfc40013c9855ec55309c5efcdd63be6de0997b84a3
-
SHA512
789dfc7ccbc6a51d27b2a6e06b7eac7c19114e24d600118550353c886d9e27b4f23871c015518147514fb0ef41aac9d7faad3c273ae60a5cfe959b2a44923694
-
SSDEEP
12288:E/qTGtD/dHjgmgP9pD/Wtv5JgGn2tWgQRvUACjpEqPvvObkGOyxhtwfW:0qgemGbD4gG2YgQaTHPSkXch6+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9dc3ae76e486e42a37e14a3097fa056b5b85d037bf0d00c400330b514059ed84.exe
Files
-
9dc3ae76e486e42a37e14a3097fa056b5b85d037bf0d00c400330b514059ed84.zip.zip
Password: infected
-
9dc3ae76e486e42a37e14a3097fa056b5b85d037bf0d00c400330b514059ed84.exe.exe windows:4 windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ