Static task
static1
Behavioral task
behavioral1
Sample
bbc3bc8711fe893a142aadbfb50fcabefc91dd640f1a22b370246ad56c3c02f7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
bbc3bc8711fe893a142aadbfb50fcabefc91dd640f1a22b370246ad56c3c02f7.exe
Resource
win10v2004-20231215-en
General
-
Target
6b62c056b88c03cadf04a8dc8e14afcb.bin
-
Size
26KB
-
MD5
be743125ee7c542d5333605595abbd6f
-
SHA1
ca5babbf3a788cb1a80fbbee31dfa1ca6f9ca55f
-
SHA256
54ad0baa6e9b292eaa44ad263f928caca913ee8d0f7de3a7a8331f5491b63996
-
SHA512
1ab78d98af4312b6ae0929e83581caea8424b1d8e87523b23cb2b3f3532997098e517f698c915d4f6dee27af080a34040e9be6ab9d420fb356e9d6ae226ea4d5
-
SSDEEP
768:vT9nLrnray3T1AuCLzs2hEu6hvlfl9UOYUesCvfaA:7hLft3ZAu0s2uuYpl9JGs5A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/bbc3bc8711fe893a142aadbfb50fcabefc91dd640f1a22b370246ad56c3c02f7.exe
Files
-
6b62c056b88c03cadf04a8dc8e14afcb.bin.zip
Password: infected
-
bbc3bc8711fe893a142aadbfb50fcabefc91dd640f1a22b370246ad56c3c02f7.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ