Static task
static1
Behavioral task
behavioral1
Sample
091716b421ed9cd032b372363db4810ec9be0c46764012aacecb7867f3654451.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
091716b421ed9cd032b372363db4810ec9be0c46764012aacecb7867f3654451.exe
Resource
win10v2004-20231215-en
General
-
Target
091716b421ed9cd032b372363db4810ec9be0c46764012aacecb7867f3654451.exe.zip
-
Size
70KB
-
MD5
7fb632f5415155965a93414819478e50
-
SHA1
01a72cf3461824555990b1149dcc6019d0f86dcd
-
SHA256
e666f0a5f5a7114db3a286d2426ea2502a1e16ca1d21645322e3d8d286a4dfc9
-
SHA512
0be6dd9198db3d9d5d8fd8e76083e5f5bb2a4341fa5e8e1e08cb48645d26fc8713315ae9c710292b664e6e22ed86d920629f7c97b6ee8f4ab3125fadbb1a2591
-
SSDEEP
1536:Yny6glW92WrfdyLtbREz7C6QAD0X1eYnheso741u2PI+U:EwOPfctbREPC6ZD0Aah0U1jPIx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/091716b421ed9cd032b372363db4810ec9be0c46764012aacecb7867f3654451.exe
Files
-
091716b421ed9cd032b372363db4810ec9be0c46764012aacecb7867f3654451.exe.zip.zip
Password: infected
-
091716b421ed9cd032b372363db4810ec9be0c46764012aacecb7867f3654451.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ