Static task
static1
Behavioral task
behavioral1
Sample
409-DEC1214.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
409-DEC1214.exe
Resource
win10v2004-20231215-en
General
-
Target
52d9462975f572962eec93d738231d6f.bin
-
Size
616KB
-
MD5
06f50ea8d946573874f56991d59d83aa
-
SHA1
82d5833f5774c640094292a8617254d46d5b2e81
-
SHA256
9c6941d3220b4774bc3fe2465d2935cb4cbd66cc6cf4e3dfdd103550918aec04
-
SHA512
799edb0acbc60f7bfd1951b9a8062e113ca3fbe16b7640132de77a3f1c59c07abaadd21da4f9cac56e50bb949cac07b056cb9f470fd9edc29cb7bfa7dc676099
-
SSDEEP
12288:rNVGfeWVsVaibgsgLHNGugbRVCl0bQFumGCKxxphfXfv4RmKl:rNWTVeaJoCkPVvJXul
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/409-DEC1214.exe
Files
-
52d9462975f572962eec93d738231d6f.bin.zip
Password: infected
-
d7e67ad96c22af9cda9912ebb04ac881ce34c50084f7d9da4d15eae4046a3fd6.iso.iso
Password: infected
-
409-DEC1214.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 633KB - Virtual size: 633KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ