Static task
static1
Behavioral task
behavioral1
Sample
Families details request.exe
Resource
win7-20231020-en
General
-
Target
Families details request.rar
-
Size
656KB
-
MD5
28159b2b441949edb1434978031f397e
-
SHA1
3caa2e5b0b35c2f1fb33f8529cac759c0c0a5ead
-
SHA256
78496f72528a3e25ab543f4cf13440b96ed65e08608f059af2c8958319261657
-
SHA512
9d93c6fa6b631cd19a4fd2292b164dfe1480b38a560573a72a286f8a17a17bd7fcd8d162ccf6f0091174d84dc6bd3ef29bf73563b2beae359c0b82e9b00916e5
-
SSDEEP
12288:38HMB1RfnsXsSL7DHXEUgRZCryfaAlxQRIjAzPdP3PypHek1CtOzbRk5caBdgBq:3w01K8aHXEkriJl6IjodvPzk1xzbGp3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Families details request.exe
Files
-
Families details request.rar.rar
-
Families details request.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 815KB - Virtual size: 814KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ