Static task
static1
Behavioral task
behavioral1
Sample
60543f63bdb95aa5eb03e848218983566c48fac35caa005209214b7ea70e5c09.exe
Resource
win7-20231020-en
General
-
Target
c00de8b488c9399f6104e5e4da8bb326.bin
-
Size
440KB
-
MD5
714e09bd3688aafad6e4575d96a5c336
-
SHA1
cdef1de48ac14acc84b88488378efeba0bc00511
-
SHA256
60608719510f648f408a616c69eed12decc189f6a2de8399db8869e5ef635c5e
-
SHA512
17c1aa787c561bf88c91fb2d7be7c60530bf736062e1db7f9618d6cd1156d802610533a2bdd380e5918c411a387eb22bd544838026c9838b0e755cd3b0d6ed6d
-
SSDEEP
12288:5vXsP6eanR1EWbvQMNvxXO1+15Mnr1eyR1gf9RIa:5vsPCMWb5vi+Anr8Og
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/60543f63bdb95aa5eb03e848218983566c48fac35caa005209214b7ea70e5c09.exe
Files
-
c00de8b488c9399f6104e5e4da8bb326.bin.zip
Password: infected
-
60543f63bdb95aa5eb03e848218983566c48fac35caa005209214b7ea70e5c09.exe.exe windows:4 windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 474KB - Virtual size: 474KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ