Static task
static1
Behavioral task
behavioral1
Sample
8817cbb6de1446a920401a072df1453459aa95684ffc7da9c05ca759b1836c0c.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
8817cbb6de1446a920401a072df1453459aa95684ffc7da9c05ca759b1836c0c.exe
Resource
win10v2004-20231023-en
General
-
Target
8817cbb6de1446a920401a072df1453459aa95684ffc7da9c05ca759b1836c0c.zip
-
Size
11.4MB
-
MD5
8c0ef147917659ac6f4b2656475281f4
-
SHA1
fa599033d406597449156a3fd108b8e4468271e6
-
SHA256
d1d5b40244a6bde76103e14070db742fc2c8ea4a27079dc0cc90ba7d0dfce0d6
-
SHA512
a9243e47c2e507369c59230f378d09335159bd2e7e7e8123dd736f7ed2c0b697dd151a52f7afbd52eed27da7899049ef127c80ffc6721cea7e5be334087a1db3
-
SSDEEP
196608:cuFDP94rP4y7wEFuOpwirnI9Wkl00BmvaZjLGV+Dqp5orNG:ciCrQy7tEgrnmp00BmcLGW9ZG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8817cbb6de1446a920401a072df1453459aa95684ffc7da9c05ca759b1836c0c.exe
Files
-
8817cbb6de1446a920401a072df1453459aa95684ffc7da9c05ca759b1836c0c.zip.zip
Password: infected
-
8817cbb6de1446a920401a072df1453459aa95684ffc7da9c05ca759b1836c0c.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 12.2MB - Virtual size: 12.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ