Static task
static1
Behavioral task
behavioral1
Sample
eaf0b886df577c2c4a4e658b77693ed6bf0afdad4fd05a1fbcfdb88d81d10de3.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
eaf0b886df577c2c4a4e658b77693ed6bf0afdad4fd05a1fbcfdb88d81d10de3.exe
Resource
win10v2004-20231020-en
General
-
Target
eaf0b886df577c2c4a4e658b77693ed6bf0afdad4fd05a1fbcfdb88d81d10de3.zip
-
Size
652KB
-
MD5
695782ad70c957b80ba33eb66c236be7
-
SHA1
168f630b271d66864a79b28ce1d7172b685cbf11
-
SHA256
d26bae8cbabe3d9a9e93506ca74535a7131655d14f4fcd401b88b919d16ef474
-
SHA512
1e32a94c29bdf8b61c2ab0aa7da3849465bd6fa80ca5ee79fc786f95bbcd45716186af01f05b0725b92e3bc0313029dbc201ac69b27df9bc3ba321a08458068e
-
SSDEEP
12288:zO8oDF0ok9Z7szFhTR+U6ji6sUEiWj67oH6m7n4fetBtOc:zOr0r9VszFqU6j7sUn72V7nUiBsc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/eaf0b886df577c2c4a4e658b77693ed6bf0afdad4fd05a1fbcfdb88d81d10de3.exe
Files
-
eaf0b886df577c2c4a4e658b77693ed6bf0afdad4fd05a1fbcfdb88d81d10de3.zip.zip
Password: infected
-
eaf0b886df577c2c4a4e658b77693ed6bf0afdad4fd05a1fbcfdb88d81d10de3.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 730KB - Virtual size: 730KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ