Static task
static1
Behavioral task
behavioral1
Sample
7c6937e919f92cf606e8a836ef82deec728167590f9c0fe790844c2030b65690.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
7c6937e919f92cf606e8a836ef82deec728167590f9c0fe790844c2030b65690.exe
Resource
win10v2004-20231023-en
General
-
Target
7c6937e919f92cf606e8a836ef82deec728167590f9c0fe790844c2030b65690.exe.zip
-
Size
542KB
-
MD5
5af0ad698f4cb6ceed783b1f6f101206
-
SHA1
b26eb2854115c57e3952ac1e41a89359c2e8901c
-
SHA256
6fb38c381bd1689183527b3efee05fed014149733d8eb8057e57c2559a27f011
-
SHA512
5d40629a2e6a4896d87129ba38346bb2c010962bc3ac4ddd78365f6a402abb5915cf9a983b2e0b3533a8b333d2f5201b884c8b00acd4462ac5ecebf9e648c4d6
-
SSDEEP
12288:+iZbb3cYZRZXW4q9iIHdtc8xRgXod0TqamYl1ZD02uA8WbeJtJNA5:+iZbb3cYrDIHdtzRgYd0mamYvZ42uNJm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/7c6937e919f92cf606e8a836ef82deec728167590f9c0fe790844c2030b65690.exe
Files
-
7c6937e919f92cf606e8a836ef82deec728167590f9c0fe790844c2030b65690.exe.zip.zip
Password: infected
-
7c6937e919f92cf606e8a836ef82deec728167590f9c0fe790844c2030b65690.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
q h)TD/ Size: 515KB - Virtual size: 514KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ