Static task
static1
Behavioral task
behavioral1
Sample
e2b25a1f45d2ea51434cb263c8709cf2b8177fe4f1fa5861350892bafc4ac378.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
e2b25a1f45d2ea51434cb263c8709cf2b8177fe4f1fa5861350892bafc4ac378.exe
Resource
win10v2004-20231023-en
General
-
Target
e2b25a1f45d2ea51434cb263c8709cf2b8177fe4f1fa5861350892bafc4ac378.exe.zip
-
Size
1.2MB
-
MD5
23f9d72efd56788f56c4b9ff213dfdb6
-
SHA1
51dd247a36bf828ce5beeeb7532b44d9bcb29a22
-
SHA256
1577def7da9864b065e737b67e8b4fc5ec1da082f37c59e51958b518ebf6d45f
-
SHA512
999a055130567e3bf134216edb1834ffe25ef4b58e9981d322dd4c92cdc9953cf3a8dbecb9a57ef58501d12d8f28e13f8275d689b8c937493e16d831a6bea143
-
SSDEEP
24576:sVzhQb4hJb49XARVjujL4ndCmBqZOM4Nx5tvNm8ZDCUDsYAk3:+Cb4hJc9QXjuj4xEurvN5DyYX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/e2b25a1f45d2ea51434cb263c8709cf2b8177fe4f1fa5861350892bafc4ac378.exe
Files
-
e2b25a1f45d2ea51434cb263c8709cf2b8177fe4f1fa5861350892bafc4ac378.exe.zip.zip
Password: infected
-
e2b25a1f45d2ea51434cb263c8709cf2b8177fe4f1fa5861350892bafc4ac378.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ