Static task
static1
Behavioral task
behavioral1
Sample
45dfd4cd57257e9fb4b967c4a6bd4059399615cf8ecb39fd692025f4f241c3d5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
45dfd4cd57257e9fb4b967c4a6bd4059399615cf8ecb39fd692025f4f241c3d5.exe
Resource
win10v2004-20231215-en
General
-
Target
6329f4c1f13f61e8c8ee29318e339c10.bin
-
Size
453KB
-
MD5
a312aa127b7c13df4eb4dd72381beade
-
SHA1
7024c045284ccb24e0b97854aef23c6eda282eb2
-
SHA256
7fdec68ac6bd6a885d187109c5df656ac2bde128c6c4b68420ff75686e2d6641
-
SHA512
7970d0b8f38a167f16679b102c3d87b9d1dcf8acfa5d3b133505e5981e513f192772bb37024df45fa4db5794ccec7436c26f6e55eec5d7152c2364f485412fe7
-
SSDEEP
12288:We9akCsnXzbo39RnvwbK+l+PmGNE5k7Z+xfgiOp3NbxahPrE:WFkTDE3jwbK1eGN10qp3NbITE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/45dfd4cd57257e9fb4b967c4a6bd4059399615cf8ecb39fd692025f4f241c3d5.exe
Files
-
6329f4c1f13f61e8c8ee29318e339c10.bin.zip
Password: infected
-
45dfd4cd57257e9fb4b967c4a6bd4059399615cf8ecb39fd692025f4f241c3d5.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 474KB - Virtual size: 474KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ