Static task
static1
Behavioral task
behavioral1
Sample
7b1cce564dc6d5d24828d9bcf583ab5fd64e3ef6574bff5f079a1c2ba9b043a5.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
7b1cce564dc6d5d24828d9bcf583ab5fd64e3ef6574bff5f079a1c2ba9b043a5.exe
Resource
win10v2004-20231023-en
General
-
Target
7b1cce564dc6d5d24828d9bcf583ab5fd64e3ef6574bff5f079a1c2ba9b043a5.zip
-
Size
540KB
-
MD5
0454d89c6e52664737e641eb4ac00512
-
SHA1
979dbd388a58699d754dca26c0eeb777d4414960
-
SHA256
79b7e82be7604d44f55e5c0d20c7f7685eedcc17a1a437411817501849fcea92
-
SHA512
ad5adabf5db37a6ad72e2f1ccea876f98e5e9a8200470a33adde34bb2e20b3c8d5ed37a727537855ee9c0b3f9f4935976e5a29741d735e463ddf5f7398051ed5
-
SSDEEP
12288:Ug0SmA1HMSgFFo5JAQOM4sfwqyK9kb1Hhle:UgzMSgbyJAZsx/kb1+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/7b1cce564dc6d5d24828d9bcf583ab5fd64e3ef6574bff5f079a1c2ba9b043a5.exe
Files
-
7b1cce564dc6d5d24828d9bcf583ab5fd64e3ef6574bff5f079a1c2ba9b043a5.zip.zip
Password: infected
-
7b1cce564dc6d5d24828d9bcf583ab5fd64e3ef6574bff5f079a1c2ba9b043a5.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 547KB - Virtual size: 547KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ