Static task
static1
Behavioral task
behavioral1
Sample
PRE ALERT NOTICE.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
PRE ALERT NOTICE.exe
Resource
win10v2004-20231023-en
General
-
Target
7c64789f34d005f5387105babbe5dd24.bin
-
Size
725KB
-
MD5
e5c3fda86aeca06f00d1ca6318203c9b
-
SHA1
36643b3160a7ab1df1598c2af33a00bdaee82d43
-
SHA256
1e4cae541fdee1465b553fd3fddc11e50703f9db55e6bdef47ed3971a34697be
-
SHA512
39b39532982f1c9786531479de609173d7aeba61e5bfd8abfc736348961fbaa538e959589d75acf39e4f3e1cb62422f38c72a0352c61f28d8698e266429dde12
-
SSDEEP
12288:YG6WcRlFX9Z6Fd/o2KK4ywD3IHmq7JjjDIdQBzLcVacZigQXTjnx0nb9szDWjoas:YG7k3tCdLKP9cGEJDQVhZLQXXx0bAagP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/PRE ALERT NOTICE.exe
Files
-
7c64789f34d005f5387105babbe5dd24.bin.zip
Password: infected
-
de1859ea088bba589cca707d6c30cafc4a544d7c2d3e37907e61e8d76eb6d6c2.zip.zip
Password: infected
-
PRE ALERT NOTICE.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 927KB - Virtual size: 926KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ