Static task
static1
Behavioral task
behavioral1
Sample
8632a6cdacd3c2ca44c427d1ef6bea4a9c16a7089a31f12fe79ba6e108860902.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
8632a6cdacd3c2ca44c427d1ef6bea4a9c16a7089a31f12fe79ba6e108860902.exe
Resource
win10v2004-20231025-en
General
-
Target
07ff2e53678892b871dc14286df16edc.bin
-
Size
627KB
-
MD5
6459086fbbae0499c53f34fff6a6d2ec
-
SHA1
9241cdb773e3b41c87d0794f45b83c889f593fb9
-
SHA256
9ce0f367b6f738d83e967dd74ccb09e8b9a5e370a8cd2a9c26bb7b8378be7e6b
-
SHA512
8be64c2cee550e27fa434314d5e47685894fd95cd7732e2740d42bfc2b7955700d9edb88c3b9caa704fa31897008da271e62c5ed819d2ca32bbae422d91e3a5d
-
SSDEEP
12288:q3C2IjsEBWwBkn7FgAf9ZpASyWTOKsRlN/o8vDd1yMQBvqJs2jJdQVjDjI:D2AsEBVBqqA5GCaNg8vLyLw62AFHI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8632a6cdacd3c2ca44c427d1ef6bea4a9c16a7089a31f12fe79ba6e108860902.exe
Files
-
07ff2e53678892b871dc14286df16edc.bin.zip
Password: infected
-
8632a6cdacd3c2ca44c427d1ef6bea4a9c16a7089a31f12fe79ba6e108860902.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 705KB - Virtual size: 704KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ