Static task
static1
Behavioral task
behavioral1
Sample
be6082ccf6c565123f516b88f1318ca78ce8231d44b4706c58b5e05a7492ff3e.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
be6082ccf6c565123f516b88f1318ca78ce8231d44b4706c58b5e05a7492ff3e.exe
Resource
win10v2004-20231023-en
General
-
Target
be6082ccf6c565123f516b88f1318ca78ce8231d44b4706c58b5e05a7492ff3e.exe.zip
-
Size
821KB
-
MD5
9cba03f18b4ea425aa461a339331cb19
-
SHA1
42ce5fcb67718e1f1bf1a2a5ecf408e9401d53d4
-
SHA256
d51b6f45507f16c24e16373ceabed289a14f50788e13a1fd924bfe3208707ea8
-
SHA512
b8c9c3b39485392822691620c1ff50b950773311fa1427e388f7e5e71f03321562772cf586d6c4825bab404a14e4eb666f9b7a972a52d8cd73fa6f5e60ab4947
-
SSDEEP
24576:IxUPOAnnU/5j46T//Y3JKlr52azOVOq+ud:DTne46T/Igh6Mud
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/be6082ccf6c565123f516b88f1318ca78ce8231d44b4706c58b5e05a7492ff3e.exe
Files
-
be6082ccf6c565123f516b88f1318ca78ce8231d44b4706c58b5e05a7492ff3e.exe.zip.zip
Password: infected
-
be6082ccf6c565123f516b88f1318ca78ce8231d44b4706c58b5e05a7492ff3e.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
YKK M( Size: 601KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 650KB - Virtual size: 649KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ