Static task
static1
Behavioral task
behavioral1
Sample
0ffa40fa3e03834a51250698ff4352b0702268583249b2d4cf07556c8b7ed3af.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ffa40fa3e03834a51250698ff4352b0702268583249b2d4cf07556c8b7ed3af.exe
Resource
win10v2004-20231222-en
General
-
Target
06cc66672c511fb686e17741790157fd.bin
-
Size
75KB
-
MD5
e122d4c293f1f91d6a0bd34115f2c183
-
SHA1
42a18ba1326e29d2eacf22c9e89debf51f0dde7b
-
SHA256
c7bf851901c1f3a94e2c3765d53f8e894c831b354309d70998e10fac2f155480
-
SHA512
967b07913409abcf7e8fea5d2ae9802bdf4f08b889ca9e343471f39fdb44ed83496133dd79fe75b99ca06f545e087d0f7b57012480edf3eb08d1ec2403532b0d
-
SSDEEP
1536:NWLER/E4OyMtPU8G6XoozLeoSnKaUXLR/QmVfVZatQeSvlhCF5Ite6VrqhxnXbpu:ZRN2PU8tXHeoLLRVRVZuxSzqBWr6xXNu
Malware Config
Signatures
Files
-
06cc66672c511fb686e17741790157fd.bin.zip
Password: infected
-
0ffa40fa3e03834a51250698ff4352b0702268583249b2d4cf07556c8b7ed3af.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
4c:3a:a8:3e:c2:83:97:7b:24:2b:c2:53:ba:5c:a2:37:cc:a3:26:80Certificate
IssuerO=Internet Widgits Pty Ltd,ST=Some-State,C=AUNot Before10/01/2024, 17:39Not After09/01/2025, 17:39SubjectO=Internet Widgits Pty Ltd,ST=Some-State,C=AU68:45:42:18:e5:10:9b:1b:78:e8:31:4d:00:e4:3f:a8:0a:82:70:33:7f:b4:0d:c6:44:1e:29:be:e8:bb:2b:40Signer
Actual PE Digest68:45:42:18:e5:10:9b:1b:78:e8:31:4d:00:e4:3f:a8:0a:82:70:33:7f:b4:0d:c6:44:1e:29:be:e8:bb:2b:40Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ