Static task
static1
Behavioral task
behavioral1
Sample
3ae96f73d805e1d3995253db4d910300d8442ea603737a1428b613061e7f61e7.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
3ae96f73d805e1d3995253db4d910300d8442ea603737a1428b613061e7f61e7.exe
Resource
win10v2004-20231023-en
General
-
Target
3ae96f73d805e1d3995253db4d910300d8442ea603737a1428b613061e7f61e7.exe.zip
-
Size
239KB
-
MD5
92ae4a2278665774d965590ff9b5d217
-
SHA1
e1780aab262e79d5eac786d3de6dca6b51eda845
-
SHA256
16ecce686a9db16e427a6476df614c33b39ea8e8dfe14a0bb6023885e42f1ce0
-
SHA512
54ceb11f69d934d45af0342ec45b58a99bb4aaeecb4ef9d25b66458b27de9488d6d35d7e23e0569886ac143c59a6ccea40862337b2358e0e86191fb2aa08be5b
-
SSDEEP
6144:0ZTmEmwmbgHWhTE1Z+YODJ0LJQa0JIVgbql/0932c7PzX4Is1YGTqg:0ZTmEsgHWSeYi53bM0932c7f+bJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/3ae96f73d805e1d3995253db4d910300d8442ea603737a1428b613061e7f61e7.exe
Files
-
3ae96f73d805e1d3995253db4d910300d8442ea603737a1428b613061e7f61e7.exe.zip.zip
Password: infected
-
3ae96f73d805e1d3995253db4d910300d8442ea603737a1428b613061e7f61e7.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
!mmUPp Size: 209KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ