Static task
static1
Behavioral task
behavioral1
Sample
6ada953ec661fe2a23fefa4a5801db675a659a445bdbb348ecb019b3f1954e36.exe
Resource
win7-20231201-en
General
-
Target
a4350446b00a515de8358c56e470d1e2.bin
-
Size
874KB
-
MD5
f12a404274f2d0efba4942c45e16cda0
-
SHA1
91f33ef6b15a7bf6f4d17234edf6ff196d340b39
-
SHA256
0c44730eb090e2e56e7e50ace7ca442a996e08b77df489e2d0101b6ebfa6b182
-
SHA512
dda5a78c960695eda817da42f0741fa0ffceebf507615e6e99271375c8886e0b6e6349ddcb727f7aeb13cc346b2123515aea7e217e928fb2e07a60cffdaa85b8
-
SSDEEP
24576:P0t24btEMqTqw5IE26uVogSMggaiBxUBaVqcFvF4:PwJEMqTqsNLMggJAcFva
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/6ada953ec661fe2a23fefa4a5801db675a659a445bdbb348ecb019b3f1954e36.exe
Files
-
a4350446b00a515de8358c56e470d1e2.bin.zip
Password: infected
-
6ada953ec661fe2a23fefa4a5801db675a659a445bdbb348ecb019b3f1954e36.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 906KB - Virtual size: 906KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ