Static task
static1
Behavioral task
behavioral1
Sample
aa7afebfd032006687eddefc5578bbc1933f1477aeaef5a17427677a4de08d95.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
aa7afebfd032006687eddefc5578bbc1933f1477aeaef5a17427677a4de08d95.exe
Resource
win10v2004-20231020-en
General
-
Target
b4746838dc731451d28d7480f981f4df.bin
-
Size
668KB
-
MD5
e86735809b3bd48c96b8437646a45fe9
-
SHA1
be71d029bfeb3efa7586aca534b7cceb5ca6afc5
-
SHA256
c2eb5ae05ebcfe92da148472d1a6c7098d3dab3f3c57153a3fb83c48128cb14e
-
SHA512
f4dddc0690ecce5c9d01bcab681141a46c3606780ffa6c33e01b845af92bd0d9c84e7124dfa16c2fbf146509bb0d23eba7dbd075c6e3ad8666b0c859d45a76ee
-
SSDEEP
12288:tqmexIid2v2TRbezKhCEd5zQNe6bB9MVyBlo9N2Sv+dOpyMN3amG:8HUe9beehrd9QbbfMgBlIodOnN3dG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/aa7afebfd032006687eddefc5578bbc1933f1477aeaef5a17427677a4de08d95.exe
Files
-
b4746838dc731451d28d7480f981f4df.bin.zip
Password: infected
-
aa7afebfd032006687eddefc5578bbc1933f1477aeaef5a17427677a4de08d95.exe.exe windows:4 windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 711KB - Virtual size: 710KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 206KB - Virtual size: 205KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ