Static task
static1
Behavioral task
behavioral1
Sample
00f82f5933b6f1bae3193eeefb7d5b7b6148028d7985a9b489e141f315ecf7c7.exe
Resource
win7-20231215-en
General
-
Target
c062b864a59a62763e26e35c97f961a3.bin
-
Size
634KB
-
MD5
46161b6ed3b0bc1e46ba72de0b729dad
-
SHA1
9ec30bd2355046c138adabf335256ea1947facb8
-
SHA256
bfa1d094fd8d685c4ef5838fe85c5563ff199307efa6b080c052f9252efce449
-
SHA512
a9a7fdf49f318c3d936ddc1503cd8d096058c4d0d682639c2c4c017263c46460cbd045ef937bbcd10feb87d8e91971e0e09b17dd9dfb74a9f3c2ca6a347361d8
-
SSDEEP
12288:7ltKP3I62F7fzhyaGpuLM6JMQ8PxLMyfrVm1ImReUFqrAW+i0:7vQ0flz46aVZNfB0ImRetG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/00f82f5933b6f1bae3193eeefb7d5b7b6148028d7985a9b489e141f315ecf7c7.exe
Files
-
c062b864a59a62763e26e35c97f961a3.bin.zip
Password: infected
-
00f82f5933b6f1bae3193eeefb7d5b7b6148028d7985a9b489e141f315ecf7c7.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 649KB - Virtual size: 649KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ