Static task
static1
Behavioral task
behavioral1
Sample
fde758d52b541296b4a6f68c65332fb1ae491b7d92723faafd252b3f46d9c948.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
fde758d52b541296b4a6f68c65332fb1ae491b7d92723faafd252b3f46d9c948.exe
Resource
win10v2004-20231023-en
General
-
Target
fde758d52b541296b4a6f68c65332fb1ae491b7d92723faafd252b3f46d9c948.zip
-
Size
509KB
-
MD5
1d65d29e74b251bc07dfc8393591fb21
-
SHA1
0aa66eb30ff347848591d51d380a6a609842e45e
-
SHA256
74b31fded42c2161a6fc7b99730f75ebfce53f3787e762a8b7be6521475709f6
-
SHA512
084327d0efeac4709bc4f64a06f6218d2b4d1a0efe760a59b139cb856c8bfefe748f0b6734c7dd5dfae12245abeca77b7a0ef5312acca70a16b1dc39c3537126
-
SSDEEP
12288:QM0bx0kzYaZRHpKJT0b7CFP6ojifX5Ef5UPE1hSkDbIgRuduhxR6s8:Q1xBAWuFP6oj2XaUA/vpAuhxRi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/fde758d52b541296b4a6f68c65332fb1ae491b7d92723faafd252b3f46d9c948.exe
Files
-
fde758d52b541296b4a6f68c65332fb1ae491b7d92723faafd252b3f46d9c948.zip.zip
Password: infected
-
fde758d52b541296b4a6f68c65332fb1ae491b7d92723faafd252b3f46d9c948.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 668KB - Virtual size: 668KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ