Static task
static1
Behavioral task
behavioral1
Sample
5304e329eb59cd3685412e48275824e7a235f28186493d08935c9db576d6c2a1.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
5304e329eb59cd3685412e48275824e7a235f28186493d08935c9db576d6c2a1.exe
Resource
win10v2004-20231020-en
General
-
Target
5304e329eb59cd3685412e48275824e7a235f28186493d08935c9db576d6c2a1.zip
-
Size
299KB
-
MD5
502778d933b9372483ed6b7435f15aae
-
SHA1
8dede16e2678b52601dd787a930039908747e42d
-
SHA256
cf3ce6eca367ec4eed189a4f5d0a8406f1a4feb8b9c1f7b08720f3893758a09e
-
SHA512
25dfb735dacd3c52b715d9e0d57e1dc98df43b1951ec861133fecdf351e9a51594cad56569c2a5ba76af97b70737c12350284d7ca097c2f1a7e74d9a055cd3f0
-
SSDEEP
6144:XXNJRJJx9ukS1w/+BjuKQP4Wqh/DiGm9kRpHaskT7Qq/9t:XdJzJxxSi0qlPqhmGmIHar1t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/5304e329eb59cd3685412e48275824e7a235f28186493d08935c9db576d6c2a1.exe
Files
-
5304e329eb59cd3685412e48275824e7a235f28186493d08935c9db576d6c2a1.zip.zip
Password: infected
-
5304e329eb59cd3685412e48275824e7a235f28186493d08935c9db576d6c2a1.exe.exe windows:4 windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 354KB - Virtual size: 353KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ