Static task
static1
Behavioral task
behavioral1
Sample
8817cbb6de1446a920401a072df1453459aa95684ffc7da9c05ca759b1836c0c.exe
Resource
win7-20231020-en
General
-
Target
8817cbb6de1446a920401a072df1453459aa95684ffc7da9c05ca759b1836c0c.zip
-
Size
11.4MB
-
MD5
413599f9422e6ef2a5227f2be1b6d82a
-
SHA1
3f205861323498ad4b3abf3221c7bf61bc61b55f
-
SHA256
911420388b719b4213bf598c74d8a66275a580de25c62a33186345c5a04b7ed0
-
SHA512
346b2d6adad5ae5dcd0cef7999683c6fda4e7e438195cc5b0f62f1a8d32e6dbec467984449afa55c792d78b8bd72c85d1a9eeee31582a6a25cb73cd7cc6e12f8
-
SSDEEP
196608:QgIKUDEQsb96q2w9vBDkG6C/RNXKvqFVu7TT6YBwkbucH2t9ESixqDIMvwu6w7fG:QsUE92Avev2fXJVIT2YeGVWt9hMqRwuS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8817cbb6de1446a920401a072df1453459aa95684ffc7da9c05ca759b1836c0c.exe
Files
-
8817cbb6de1446a920401a072df1453459aa95684ffc7da9c05ca759b1836c0c.zip.zip
Password: infected
-
8817cbb6de1446a920401a072df1453459aa95684ffc7da9c05ca759b1836c0c.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 12.2MB - Virtual size: 12.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ