Static task
static1
Behavioral task
behavioral1
Sample
919026348d4cb81a3792a459c55f2bc655fc341da78d9d911718f23c4e885c33.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
919026348d4cb81a3792a459c55f2bc655fc341da78d9d911718f23c4e885c33.exe
Resource
win10v2004-20231025-en
General
-
Target
919026348d4cb81a3792a459c55f2bc655fc341da78d9d911718f23c4e885c33.exe.zip
-
Size
3.3MB
-
MD5
c860d2c01d8b0b13297eb2d79d1ff18b
-
SHA1
57dbe0fbf1a70511d0c32409fee5daa98c5a8b33
-
SHA256
503f4fba1f313bf30ae5c85568a5d919448286d5c53ecd6109c046b0bcde089f
-
SHA512
f74aabfea1f749534602b849e9d4fa63fe49b7687f6ddf946382af3f3bbd5affb992ed26a30321516d7adb3cbebfd5ecedfab4612a828a2a7cffec38d5712127
-
SSDEEP
98304:r04BOtdr0XMKmZ5+AAVO7AF9zhjQcvatIPTPioX8rtK7K:8rPKhVPF9acvatILaw8rwK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/919026348d4cb81a3792a459c55f2bc655fc341da78d9d911718f23c4e885c33.exe
Files
-
919026348d4cb81a3792a459c55f2bc655fc341da78d9d911718f23c4e885c33.exe.zip.zip
Password: infected
-
919026348d4cb81a3792a459c55f2bc655fc341da78d9d911718f23c4e885c33.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ