Static task
static1
Behavioral task
behavioral1
Sample
SOA DEC 31 2023.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
SOA DEC 31 2023.exe
Resource
win10v2004-20231222-en
General
-
Target
17a340499dd96f6ed600e07d5f481e01.bin
-
Size
616KB
-
MD5
902fd4103f8c13f28c3700c2b7cb1c62
-
SHA1
8eda08203c81dfd450e5442c97a4ff97b2323983
-
SHA256
600188560c0661662e3ffb79162569005aaa2ae5403be8ac7b9240f4f30c2498
-
SHA512
613a1075f67ea6b4ddc12e0d355710f2cd022155a62b7cdef5260f67d3aa7b98306505bdab814ddad753400440b40c1ce97b3fe86ec2cb0d3aece53640e5c044
-
SSDEEP
12288:7pNnBxaa+FcXeFaHQGd8SomqZPcl9rklODeIGsS72dAYdG2E9lnhorMkvVDvplC:7pNnSFchHQK8So/Pcl9Iu02dNxvrMktC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/SOA DEC 31 2023.exe
Files
-
17a340499dd96f6ed600e07d5f481e01.bin.zip
Password: infected
-
ac5511e317884fd498f8666fc0bf9605da8b923dc6c6372d824b058d6b542842.zip.zip
Password: infected
-
SOA DEC 31 2023.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 641KB - Virtual size: 640KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ