Static task
static1
Behavioral task
behavioral1
Sample
02ef31665fe333e9d091dd45422d5101c4e85494050f0867f89be111db880d4f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
02ef31665fe333e9d091dd45422d5101c4e85494050f0867f89be111db880d4f.exe
Resource
win10v2004-20231215-en
General
-
Target
02ef31665fe333e9d091dd45422d5101c4e85494050f0867f89be111db880d4f.exe.zip
-
Size
1.9MB
-
MD5
92933aa79a8086f6e03695f02d2a5005
-
SHA1
23e91f15d9c3422254546c2c5f16886768c86638
-
SHA256
9b18b5e004e2e416920171d5f64b7724fa8efd468f4b1236deb0d495a849736c
-
SHA512
8fb2925b19a4eedbcb73573bd24f58f8252ff944938bad41a0b196c1683d222c5e141b3889ad1433dc4bd2a4ac64e29427bdef50e663cb4bcadca0242c361d2c
-
SSDEEP
49152:Nu+OrQeKOHBgGmNKEcUMFPwBiXdytNxAPsiM35:QGOhgG6cUu4Aynx3iO5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/02ef31665fe333e9d091dd45422d5101c4e85494050f0867f89be111db880d4f.exe
Files
-
02ef31665fe333e9d091dd45422d5101c4e85494050f0867f89be111db880d4f.exe.zip.zip
Password: infected
-
02ef31665fe333e9d091dd45422d5101c4e85494050f0867f89be111db880d4f.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ