Static task
static1
Behavioral task
behavioral1
Sample
138b791bb04c3073e3e752fdcf5bc5490c4169e9f553954b025aab8414c4589a.exe
Resource
win7-20231023-en
General
-
Target
138b791bb04c3073e3e752fdcf5bc5490c4169e9f553954b025aab8414c4589a.zip
-
Size
501KB
-
MD5
03eef97bce57664a5f024579bae1b405
-
SHA1
6d081d30543fd125becb8fafe13750aa98096726
-
SHA256
5cd379d1024d7dae18b1dcb62a0290008c3c67e4c46f13c2c639d3a7aae51bee
-
SHA512
715eac9b5f36e646bb58975a0c91966dcefc67b9a99e650d026dfa8f846a700af0507cc412af7d0f82f88a74de3f61ed0197706c17a40e5230e6b2edd326b155
-
SSDEEP
12288:a5pOHDmcSIQ5c3acI4KBe09IjBjDEU2bUJaMwpj76ZyHXxvqRbB3q:aSHDOeV09RU2bUJaMg2AZqRbB6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/138b791bb04c3073e3e752fdcf5bc5490c4169e9f553954b025aab8414c4589a.exe
Files
-
138b791bb04c3073e3e752fdcf5bc5490c4169e9f553954b025aab8414c4589a.zip.zip
Password: infected
-
138b791bb04c3073e3e752fdcf5bc5490c4169e9f553954b025aab8414c4589a.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 529KB - Virtual size: 528KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ