Static task
static1
Behavioral task
behavioral1
Sample
78729c8e1d3dcc6c70445016e36eb07d79d87033eb124598363038b7d001769f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
78729c8e1d3dcc6c70445016e36eb07d79d87033eb124598363038b7d001769f.exe
Resource
win10v2004-20231222-en
General
-
Target
78729c8e1d3dcc6c70445016e36eb07d79d87033eb124598363038b7d001769f.exe.zip
-
Size
1022KB
-
MD5
466b2528f60efac33f2ffd313dfc9382
-
SHA1
62f4d4402a82a980267adb703d174eb56e26902a
-
SHA256
a77ae641a1aad2a0d900efc86bb3e10e7b39272f492396731c43b032e60d2774
-
SHA512
ba82e216442323390295c7d349f29afaf757308ea59a2c6e60dbd414b9569782209372299bc2cafb32f9c714bcfd1e55e1b025c0017bd52ea348c038595df144
-
SSDEEP
24576:EiQPjphGsX4Tgy3wRX/l0uBOS+gWMTsMHAVKQIH9Qy:E5bvGsXWX3aeKOS+gWCsMHYKQi6y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/78729c8e1d3dcc6c70445016e36eb07d79d87033eb124598363038b7d001769f.exe
Files
-
78729c8e1d3dcc6c70445016e36eb07d79d87033eb124598363038b7d001769f.exe.zip.zip
Password: infected
-
78729c8e1d3dcc6c70445016e36eb07d79d87033eb124598363038b7d001769f.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ