Static task
static1
Behavioral task
behavioral1
Sample
b2821e2d11401060218dc7e459e364d9dcdc9d71beef226ae081594a64b6449a.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
b2821e2d11401060218dc7e459e364d9dcdc9d71beef226ae081594a64b6449a.exe
Resource
win10v2004-20231020-en
General
-
Target
b2821e2d11401060218dc7e459e364d9dcdc9d71beef226ae081594a64b6449a.zip
-
Size
390KB
-
MD5
4984486117911f4090ed67782fc2ad3b
-
SHA1
6dc3d028e31b1dbb51163ab10bd49ce48c26ecbe
-
SHA256
f80644cbd3322b8e1bedda38f333c028b85c35eb9d1eaf15e3356e0bf329e1eb
-
SHA512
5781d2919cb115b343e03428d288a6535b4c9f6fe1848604036b05d428a487180b70aca38a91c29599d6166e4707a17f65fb5ac76613c8c35176a13a6dde7f04
-
SSDEEP
12288:QcwoYe0gIQ1vf9Sp9v8yEMdok2TG1pOueLO:QoYe0JQ1X9SpayjokGwOuj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b2821e2d11401060218dc7e459e364d9dcdc9d71beef226ae081594a64b6449a.exe
Files
-
b2821e2d11401060218dc7e459e364d9dcdc9d71beef226ae081594a64b6449a.zip.zip
Password: infected
-
b2821e2d11401060218dc7e459e364d9dcdc9d71beef226ae081594a64b6449a.exe.exe windows:4 windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 453KB - Virtual size: 453KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ