Static task
static1
Behavioral task
behavioral1
Sample
HTS2.21.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
HTS2.21.exe
Resource
win10v2004-20231020-en
General
-
Target
5cc210ab72bae0c0bceab0c1732bacb8ad44355ed95bec769f72fed5c18dc438.zip.zip
-
Size
4.9MB
-
MD5
194c306c69267eea53c0b433b914da63
-
SHA1
00f7846c1fb401324b4e27c6822eae75d217f462
-
SHA256
71c33de0536f75458898a09085b03d691793a67fd06e7e869e536dac54cf9026
-
SHA512
085c8ead356721487a8f3eb7a34104870ca1ab2a375ec29e43b5b6ed07d7c1ff48653e84e8d95a4abd72381a961697dca077b59fc0bbc491d398f8847bdcc015
-
SSDEEP
98304:1r28jzqg3awvRHgn17psjbAVN6sEdMxCCoUQm4pzJi/QdLWCsE2c:Nbf4QJ0EdMIUYpFKQjsPc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/HTS2.21.exe
Files
-
5cc210ab72bae0c0bceab0c1732bacb8ad44355ed95bec769f72fed5c18dc438.zip.zip.zip
Password: infected
-
5cc210ab72bae0c0bceab0c1732bacb8ad44355ed95bec769f72fed5c18dc438.zip.zip
-
HTS2.21.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 7.5MB - Virtual size: 7.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HTS Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ