Static task
static1
Behavioral task
behavioral1
Sample
3f1efc05d9d6a3f302c354bb0bf5802e258813d2cf6bb63bd2f8ead38df31beb.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
3f1efc05d9d6a3f302c354bb0bf5802e258813d2cf6bb63bd2f8ead38df31beb.exe
Resource
win10v2004-20231020-en
General
-
Target
3f1efc05d9d6a3f302c354bb0bf5802e258813d2cf6bb63bd2f8ead38df31beb.zip
-
Size
468KB
-
MD5
e335a168d57e2dbcca89cf4f1c5304c0
-
SHA1
d6b568e37c3c23b9c0a4d8be7240af277c8b2cc4
-
SHA256
9e05ab7264b69d71a04117ab3d5fb6a5c1068ccb3f1d08a068900deb654d995a
-
SHA512
a0f3a7d5ab5c9bac017555de7d71ba3242209093b00e2f4ecf0cd10bd397ea480230f1f5769a48851ab5dbab63b9839caa62bcd870e0e81b9036c0c2de792787
-
SSDEEP
12288:/Kh5LiSsiGEbeP++hyHHtSCA1a3uvkILBavdWrVz0:/UYSsi/eVgoCA1aenLBavoe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/3f1efc05d9d6a3f302c354bb0bf5802e258813d2cf6bb63bd2f8ead38df31beb.exe
Files
-
3f1efc05d9d6a3f302c354bb0bf5802e258813d2cf6bb63bd2f8ead38df31beb.zip.zip
Password: infected
-
3f1efc05d9d6a3f302c354bb0bf5802e258813d2cf6bb63bd2f8ead38df31beb.exe.exe windows:4 windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 500KB - Virtual size: 499KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ