Static task
static1
Behavioral task
behavioral1
Sample
f2ef4aecdf3304be6f7f7b729eea019ae8af63befc4c0736e71c722c169e3eab.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
f2ef4aecdf3304be6f7f7b729eea019ae8af63befc4c0736e71c722c169e3eab.exe
Resource
win10v2004-20231020-en
General
-
Target
118090ee776424c6ff08ec26a98cb134.bin
-
Size
821KB
-
MD5
915518fc3b67d95514ecc78e68ce3ab5
-
SHA1
1e31b43b0378b2b1f8ade101fa01f5a1e7385533
-
SHA256
2ce90427a171cce621d499b3a4e305096fef6a172dfe008178124b3bfe67418e
-
SHA512
8a04fc3b415d1fdd39999ff42b126d0d66625887b69dc880cf79007ed95adab7e6ecdfe8afa47c711c43663cc33cb48867475a858c347f0284306afe42f78d85
-
SSDEEP
24576:dicIYcOGiPwW5yJOQ5kt6v0DPktSOLGn/XUfkBF3:dixn0wW5yQC26MzaSOLAku3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/f2ef4aecdf3304be6f7f7b729eea019ae8af63befc4c0736e71c722c169e3eab.exe
Files
-
118090ee776424c6ff08ec26a98cb134.bin.zip
Password: infected
-
f2ef4aecdf3304be6f7f7b729eea019ae8af63befc4c0736e71c722c169e3eab.exe.exe windows:4 windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 950KB - Virtual size: 949KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ