Static task
static1
Behavioral task
behavioral1
Sample
722b47ca4f0c2c337f7adf494536d7aa69d5e6bed3e9641b2017ff588be488cb.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
722b47ca4f0c2c337f7adf494536d7aa69d5e6bed3e9641b2017ff588be488cb.exe
Resource
win10v2004-20231127-en
General
-
Target
aced2c8014dbfe7a8dc34475f1c3ff50.bin
-
Size
626KB
-
MD5
b489a31e897fd71604d69d0c0730114a
-
SHA1
975d9354c120e534c8900c98885f09e4d4d606db
-
SHA256
4b975fe086fc18e15ac84e4fdddf6b46a8773b3f2810eb55a7cacf67543f8b40
-
SHA512
c1124e39231229e598d8a63a75cf8fcd8a983f7c45bce2b45ba348639394791e6e142d47b444e9d97aba77bff45e19cda1055ab43f76d7ae5c6b649bc01e9957
-
SSDEEP
12288:6O4npV1X4rZUok6MKnNJ5zEJqlI9hEYmDz98ACCgAM2bVgwWK2jplhn3:6Og7ovk6MWNLz3lOeYZ93Ap2rh3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/722b47ca4f0c2c337f7adf494536d7aa69d5e6bed3e9641b2017ff588be488cb.exe
Files
-
aced2c8014dbfe7a8dc34475f1c3ff50.bin.zip
Password: infected
-
722b47ca4f0c2c337f7adf494536d7aa69d5e6bed3e9641b2017ff588be488cb.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 677KB - Virtual size: 677KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ