Static task
static1
Behavioral task
behavioral1
Sample
654ca19baf6ec528d5b45ac154216c2b108c07508a37c975c4cadb535b28b737.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
654ca19baf6ec528d5b45ac154216c2b108c07508a37c975c4cadb535b28b737.exe
Resource
win10v2004-20231023-en
General
-
Target
654ca19baf6ec528d5b45ac154216c2b108c07508a37c975c4cadb535b28b737.exe.zip
-
Size
1.9MB
-
MD5
def5e57b08839ac5abbe60b3b9664123
-
SHA1
d2b4abcd7296056ff7cfbdbf4727cd94d1acfc46
-
SHA256
d68c859d6036bc8fe433c4ee589e4d63e8de107dab41df72f9c1760732505a55
-
SHA512
ffcec39b0c21f82c84a794ac2067fad3d40c88cd17a7e6f453a3fa897fd643bbfaf2380c9616b68b3c7d62006a0167e65427cc97d5f04fd2bf70768f9529ae0c
-
SSDEEP
49152:hgALbGaFe0/PMkYJNNh9lQVVT+aVEgNFd3vIvQ77uF:6AWKUXNXlQVv7NX/K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/654ca19baf6ec528d5b45ac154216c2b108c07508a37c975c4cadb535b28b737.exe
Files
-
654ca19baf6ec528d5b45ac154216c2b108c07508a37c975c4cadb535b28b737.exe.zip.zip
Password: infected
-
654ca19baf6ec528d5b45ac154216c2b108c07508a37c975c4cadb535b28b737.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ