Static task
static1
Behavioral task
behavioral1
Sample
7e06f03f8d47b752265da3846c4806bc1ff7159e0e39c5db34774daf5da91003.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
7e06f03f8d47b752265da3846c4806bc1ff7159e0e39c5db34774daf5da91003.exe
Resource
win10v2004-20231020-en
General
-
Target
7e06f03f8d47b752265da3846c4806bc1ff7159e0e39c5db34774daf5da91003.exe.zip
-
Size
434KB
-
MD5
2f6d9355966fd46e7c0649e9e4a51d24
-
SHA1
c1e8ba8642044e57c98255e065162f3b9c0c2980
-
SHA256
649920950714fa8eabe2d805605441200e52b6880c053c9b430a3ea678d7a50c
-
SHA512
8f4bb62b73bc4923f6121ee3e0a229d61839552d1f1cee2481200db0baaa43f9ec9eda29c9f9e0da37f5c41c06f78015687641ef90e5beaac94cba9ebe930086
-
SSDEEP
12288:lKSSE/ki6TyuYJYEgt77KQo98Z8lzthDLufh:UuJ6TybJYEao64zWh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/7e06f03f8d47b752265da3846c4806bc1ff7159e0e39c5db34774daf5da91003.exe
Files
-
7e06f03f8d47b752265da3846c4806bc1ff7159e0e39c5db34774daf5da91003.exe.zip.zip
Password: infected
-
7e06f03f8d47b752265da3846c4806bc1ff7159e0e39c5db34774daf5da91003.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 270KB - Virtual size: 269KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.enigma1 Size: 232KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE