Static task
static1
Behavioral task
behavioral1
Sample
SLIP-full amount-50006654455339877322346689377782.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
SLIP-full amount-50006654455339877322346689377782.exe
Resource
win10v2004-20231215-en
General
-
Target
5771e71802f16578ca575cce2f74a710.bin
-
Size
667KB
-
MD5
cd76b5f6bb39e9801bc7cf1fc716e1e5
-
SHA1
edaa3e5f5be6d0a95e01cd806ebe2469bf461e80
-
SHA256
76ccdf884961ada01a78328ebab610499c17401a7ccb3a4998d0976d7dd1d554
-
SHA512
2bb7809cdaf73c746339dc9c16eb5ee51acdc4dcdea8bc74e70df95d9113b93a333389a75a6b93d6e2875514c0cc696b5f84497cbc51481df3e75639247a7a3d
-
SSDEEP
12288:lzOYnBOWKk8huggcTCnEEQo8lBABnIQ072Ayh+TGHhsyP0oq6BSQ/DxgnqessMjf:QY4Y8MyCdouBnIQ0qb+SHhXP0oq6BSaV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/SLIP-full amount-50006654455339877322346689377782.exe
Files
-
5771e71802f16578ca575cce2f74a710.bin.zip
Password: infected
-
100eaca6527ae17bedec11b52f36b335b7128cabac1ab4dc56679cb1d8f181f6.gz.rar
Password: infected
-
SLIP-full amount-50006654455339877322346689377782.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 950KB - Virtual size: 949KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ