Static task
static1
Behavioral task
behavioral1
Sample
5f3cb21eb789ea23f470556c733a1dc2e47999daaf33339921db980e4942fa39.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5f3cb21eb789ea23f470556c733a1dc2e47999daaf33339921db980e4942fa39.exe
Resource
win10v2004-20231215-en
General
-
Target
5f3cb21eb789ea23f470556c733a1dc2e47999daaf33339921db980e4942fa39.exe.zip
-
Size
333KB
-
MD5
e38e7aee11075f1c27f27ee5eb033dc4
-
SHA1
0eb03018602aa8883d11eb44a4444f0376d6ce4e
-
SHA256
fe6b45d30ccaca0d8dbc705f8944d3db924da7fd614562749b40ee1d96c70239
-
SHA512
3633723319633766c54554bd1e9146c9ab1843187f5c5b76a4053c4a9f0dab8731c2b5a43f7acddb5424f502d3430936dcd43e589460dd67a3f85a1864a94cfb
-
SSDEEP
6144:kdi9t0qZwcwiOnP6+gVh6efjVT1+nmuWaYoZB563ETeY3UR5T56iFZ9P:3ETc8ny+g36YhTEd564k5p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/5f3cb21eb789ea23f470556c733a1dc2e47999daaf33339921db980e4942fa39.exe
Files
-
5f3cb21eb789ea23f470556c733a1dc2e47999daaf33339921db980e4942fa39.exe.zip.zip
Password: infected
-
5f3cb21eb789ea23f470556c733a1dc2e47999daaf33339921db980e4942fa39.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 336KB - Virtual size: 336KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ