Static task
static1
Behavioral task
behavioral1
Sample
dd2bb6ea65c082f25a75158f22c2d10e3be1daa026334a8d8e06007bbd245f70.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
dd2bb6ea65c082f25a75158f22c2d10e3be1daa026334a8d8e06007bbd245f70.exe
Resource
win10v2004-20231215-en
General
-
Target
3f400d97f2abae8a447d88bbb47824f1.bin
-
Size
523KB
-
MD5
b6edee654cb0198367feba940fa069c2
-
SHA1
a9fc44d7b4855b9ee9d8fe4c4c0aa8acfa983369
-
SHA256
244a7bfa557f9eda1cdba5161c76f4f239f2ce202864c5d9e314cb8b443b9f4a
-
SHA512
36bc91ada56f25a94174e197e752227b0eac08cd9acfca2f99d1a6ea7dcd9bf935786f0ff809251ffef60952411e824ce26033e2eec4ed7a216609ae306d84ba
-
SSDEEP
12288:TJK7TogdC73CCSHFJgSg1lzLgH00jzulC9+qAJ38mM7cpu0x:CT8SC4FJfgnvgHdzKt338mM7Cx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/dd2bb6ea65c082f25a75158f22c2d10e3be1daa026334a8d8e06007bbd245f70.exe
Files
-
3f400d97f2abae8a447d88bbb47824f1.bin.zip
Password: infected
-
dd2bb6ea65c082f25a75158f22c2d10e3be1daa026334a8d8e06007bbd245f70.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ