Static task
static1
Behavioral task
behavioral1
Sample
e7f98ddb4183f82f7931888ff9237f898dc0e484241b02c5e0780204fe680c7f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
e7f98ddb4183f82f7931888ff9237f898dc0e484241b02c5e0780204fe680c7f.exe
Resource
win10v2004-20231222-en
General
-
Target
671f91d1c3acee050ca7106080a9d6f5.bin
-
Size
41KB
-
MD5
3ad9f14ea3c613714b9426fe3b12a93c
-
SHA1
2ec4cfc1d9e1453458c137e923de88484bfa888c
-
SHA256
aa3d9f47cc45774f822c857cfdcee5b808fc6a1c2239abf0cd4b18a21091c7a8
-
SHA512
3508f1e0c29f23f58bdd9eeeb047d70ba171963363f6604a39d87bf85a8ab081432568dcbb1cf30e75f74337c106cb9ae12281640543e1efca91daf1b90e24f7
-
SSDEEP
768:H/aYKAloIaxEdz5llGU6h9nGWeJCUizMxUkCauzelrRza:fRKAmIaE4/hVGW2xUkCdQRza
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/e7f98ddb4183f82f7931888ff9237f898dc0e484241b02c5e0780204fe680c7f.exe
Files
-
671f91d1c3acee050ca7106080a9d6f5.bin.zip
Password: infected
-
e7f98ddb4183f82f7931888ff9237f898dc0e484241b02c5e0780204fe680c7f.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ