Static task
static1
Behavioral task
behavioral1
Sample
1cd95a6e7380834f98182cef84e49b843d27c20bc2c111849a756408a8a2a34b.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
1cd95a6e7380834f98182cef84e49b843d27c20bc2c111849a756408a8a2a34b.exe
Resource
win10v2004-20231023-en
General
-
Target
1cd95a6e7380834f98182cef84e49b843d27c20bc2c111849a756408a8a2a34b.exe.zip
-
Size
632KB
-
MD5
e1ceb8629d1c4ebe016f331be7a06404
-
SHA1
b2d58b639b73fe17626d15f6cada8a7c6cf5e2ca
-
SHA256
2d80c70b807366bd95568061912531e7f0c14b6f558b403260d8a26ee373a23f
-
SHA512
b87771d78092a60c26ad3b11fe674b0be6d44800a1185511a92ab4efb69287d9eaf7a3de261075fbd19af5c5a8be39486c63d5c5cc3f78dcb1f0581c7ed9f8a2
-
SSDEEP
12288:L7KIG4Z5jJXX1R9skw6v96srtXCe+3y61J/rKkW4d0btpJxOFazSwTF3:P/ZdRbn96srtXCe+Z1Jm74d0btFOFaz7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/1cd95a6e7380834f98182cef84e49b843d27c20bc2c111849a756408a8a2a34b.exe
Files
-
1cd95a6e7380834f98182cef84e49b843d27c20bc2c111849a756408a8a2a34b.exe.zip.zip
Password: infected
-
1cd95a6e7380834f98182cef84e49b843d27c20bc2c111849a756408a8a2a34b.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 749KB - Virtual size: 749KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ