Static task
static1
Behavioral task
behavioral1
Sample
8817cbb6de1446a920401a072df1453459aa95684ffc7da9c05ca759b1836c0c.exe
Resource
win7-20231020-en
General
-
Target
8817cbb6de1446a920401a072df1453459aa95684ffc7da9c05ca759b1836c0c.zip
-
Size
11.4MB
-
MD5
cf3e205aa03f27ec2293ebc7504cc8c2
-
SHA1
7e917bfa68282a207d44ee37192501aac6847c8c
-
SHA256
26ef78f3cc55ecfd66cf35eba103381bd42a92d570f283f5f22d0c8ce28527d2
-
SHA512
6496f36752b8d7701b0aa7d8ff03260fe7c0810fb99c453288df175d6304434359482ac751c242248ef78abc80a70019851fe44c676d611ed70ab258f20f9400
-
SSDEEP
196608:OtpR33e/kKVMiySHg/ZXcW5ZO14hTrlgOpz/2rVoHq6DvCuJ1gkbhEGk1PuMXUEq:ONuMoHglD5Z2WTrlt/2xohDauHgH11Pc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8817cbb6de1446a920401a072df1453459aa95684ffc7da9c05ca759b1836c0c.exe
Files
-
8817cbb6de1446a920401a072df1453459aa95684ffc7da9c05ca759b1836c0c.zip.zip
Password: infected
-
8817cbb6de1446a920401a072df1453459aa95684ffc7da9c05ca759b1836c0c.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 12.2MB - Virtual size: 12.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ