Static task
static1
Behavioral task
behavioral1
Sample
fe3ccff6c0edb4aa937583af5bb2222216a642762d9a4c802315e775fc41d8b4.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
fe3ccff6c0edb4aa937583af5bb2222216a642762d9a4c802315e775fc41d8b4.exe
Resource
win10v2004-20231020-en
General
-
Target
fe3ccff6c0edb4aa937583af5bb2222216a642762d9a4c802315e775fc41d8b4.exe.zip
-
Size
1.9MB
-
MD5
e6221ebf5d137d765a008a7b42c4a34e
-
SHA1
b348818cf4210909b47d61dbb58ae9c3ebd44d58
-
SHA256
6750096c1be5bb4aed8de9d52c228a583e0b9ae190919b865216cd29b6616cf5
-
SHA512
4ba0670180e60110fdcd18ecfffdd18f809ef5514989b7208036f1868a43d5b3fbc3c83b0ab969106b90ea7af7c751ab559b4f727aaacfacca79894f318c5bcc
-
SSDEEP
49152:f+Ge7o8hvADtd22jdE65A7BYjUZ8USbIg/xEZ3d:Xe71hoRksER7BYjUGDbIg/a3d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/fe3ccff6c0edb4aa937583af5bb2222216a642762d9a4c802315e775fc41d8b4.exe
Files
-
fe3ccff6c0edb4aa937583af5bb2222216a642762d9a4c802315e775fc41d8b4.exe.zip.zip
Password: infected
-
fe3ccff6c0edb4aa937583af5bb2222216a642762d9a4c802315e775fc41d8b4.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 162KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ