Static task
static1
Behavioral task
behavioral1
Sample
ae7135ed1efa2574805c347583f3f53948500d423fb404c20fdb375a68105842.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
ae7135ed1efa2574805c347583f3f53948500d423fb404c20fdb375a68105842.exe
Resource
win10v2004-20231020-en
General
-
Target
ae7135ed1efa2574805c347583f3f53948500d423fb404c20fdb375a68105842.exe.zip
-
Size
10.2MB
-
MD5
3862400aac22c3d38d1104b11d1152ce
-
SHA1
0881d5fa2d7e2632bbf683274afdfe3c1e54ee17
-
SHA256
beb14623c6fbb64d5f8ff1ce51e8d2b5be4003f3051ed5dc5d6dcbf37639a04d
-
SHA512
d8723207600acd67a11915e7ff731c0af91d40ccb805208147aca36ddb0570b93b486b815d427500fed321a8871416bf405d28251903880a259b0fc9107f0642
-
SSDEEP
196608:akTtWi1IRTAUpQFr5I9CtM0V1N+2ENyf6u1Vg2xn9WAsV+OqdAASiy0Z:hqRTcYmM8+3UP02xnq+/dA0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ae7135ed1efa2574805c347583f3f53948500d423fb404c20fdb375a68105842.exe
Files
-
ae7135ed1efa2574805c347583f3f53948500d423fb404c20fdb375a68105842.exe.zip.zip
Password: infected
-
ae7135ed1efa2574805c347583f3f53948500d423fb404c20fdb375a68105842.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 16.8MB - Virtual size: 16.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 267KB - Virtual size: 267KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ