Static task
static1
Behavioral task
behavioral1
Sample
Documents as requested.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
Documents as requested.exe
Resource
win10v2004-20231127-en
General
-
Target
891070446c4fa23424efe03ec4b36dfeb8804e2cc68960666d5232ac4fd1baf8
-
Size
572KB
-
MD5
dca0841b0e46eb8282af160d0cdc6a55
-
SHA1
c25066e2b8d9714c491bf26d35461cd130aa8422
-
SHA256
891070446c4fa23424efe03ec4b36dfeb8804e2cc68960666d5232ac4fd1baf8
-
SHA512
86a107140a6689e4bdff2bccbb952b8ef141d02cda62504d37921852d2e627caf8de124e68ca6594960f3c1cb2e5e34a6d191f5d59ac0e0d384761616ffb2e82
-
SSDEEP
12288:g0KVGTm0Ho8ayWTYXtqH1JF3xYJA555dj9v/3YEn1:JTpIPyBXq1/31555d5vdn1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Documents as requested.exe
Files
-
891070446c4fa23424efe03ec4b36dfeb8804e2cc68960666d5232ac4fd1baf8.iso
-
out.iso.iso
-
Documents as requested.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 518KB - Virtual size: 517KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ