Static task
static1
Behavioral task
behavioral1
Sample
8f6952d8695ee78e7c79808b37e18213d29fc67db10b4c7872259e153256195f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8f6952d8695ee78e7c79808b37e18213d29fc67db10b4c7872259e153256195f.exe
Resource
win10v2004-20231215-en
General
-
Target
9b2fb71f3fa944fbc99d800ec8b0fe37.bin
-
Size
627KB
-
MD5
8832a061e031de1503496fede770568a
-
SHA1
72f471d0e196ff26b590cb100a8c276c882a8338
-
SHA256
2656021ce716ed44fec362a09c7f659cbdbdddece7cd74cd887e83f499a2924c
-
SHA512
f71c20a03532326d18210c1c7c2c5690009d3e7e8b5c050250b7c5bc63755bee119e3cadd9bab558e48371914aa856a673d49be297f99a08b525bd5aa9626c74
-
SSDEEP
12288:ZfHp8HHEL71GjjlhO2G3WZtdlmDTsqW0HtVwUNszpXPliYDTe90zrKeUJ:NH6HHe7UnlhXG8m8jyszdcYDTm0X/UJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8f6952d8695ee78e7c79808b37e18213d29fc67db10b4c7872259e153256195f.exe
Files
-
9b2fb71f3fa944fbc99d800ec8b0fe37.bin.zip
Password: infected
-
8f6952d8695ee78e7c79808b37e18213d29fc67db10b4c7872259e153256195f.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 854KB - Virtual size: 854KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ