Static task
static1
Behavioral task
behavioral1
Sample
AWB #150322.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
AWB #150322.exe
Resource
win10v2004-20231215-en
General
-
Target
d6e64c19995d496ccd587653d5d44c87.bin
-
Size
725KB
-
MD5
09bbf226ce14966a772e8963ee54bdb9
-
SHA1
030259a476fb70ee4e66c27a2a0d432cf4a060df
-
SHA256
dbbcb6bfe735cb6640a34d5dd6b24342ce96e526fcdc2513d216961b3dba23ab
-
SHA512
a363427e504eb9f192cedfdcb89759401217b3fa4fc61f48b553ae7dedb83418570b0ee0a089bc71cc6905785a9ffa95518f40a8e40c92513591eb59654dc74c
-
SSDEEP
12288:VO7VMCEcVJTnVGN1qzbtF6uqiffcW3izXPQne8ebFbiFLsDQkgKsehskhdIP:VO5FVV41qb6uqWfcW3EXPKuiViZFJ5dq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/AWB #150322.exe
Files
-
d6e64c19995d496ccd587653d5d44c87.bin.zip
Password: infected
-
272438e4a90035c1ab4ff8a0ccdfc3a4c3364e59963abc2c74ade2b0d56c066e.rar.rar
Password: infected
-
AWB #150322.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 752KB - Virtual size: 751KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ