Static task
static1
Behavioral task
behavioral1
Sample
1db0b59b7d436ea6160df9ca561543ea77cf6243fcf21a46282852d67421da7e.exe
Resource
win7-20231023-en
General
-
Target
1db0b59b7d436ea6160df9ca561543ea77cf6243fcf21a46282852d67421da7e.zip
-
Size
141KB
-
MD5
921b4e7421a62d8ffff60872cdc009db
-
SHA1
50eb32891121136bf3f7b4a38c79047fe34560f6
-
SHA256
f60f8cb7b9d6c1501e6116be2234bf17544df89aca4654f3d4d5c0956ba91638
-
SHA512
5f58ab163710676c9135c99aa1fdef421c692ad3575422533561eb4da7ae5110ceb65b4f13fb1d2c8692acfb4b4c1b0b41fddf60253f02d2303fcc5188a4b154
-
SSDEEP
3072:4IrXOkrWhUni5lbn7Y3AuGTGC+c4dMSf1eO36J19k9dd:4Sek1iz7YGTP4f1h36J6dd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/1db0b59b7d436ea6160df9ca561543ea77cf6243fcf21a46282852d67421da7e.exe
Files
-
1db0b59b7d436ea6160df9ca561543ea77cf6243fcf21a46282852d67421da7e.zip.zip
Password: infected
-
1db0b59b7d436ea6160df9ca561543ea77cf6243fcf21a46282852d67421da7e.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 154KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ