Static task
static1
Behavioral task
behavioral1
Sample
f5149cde57620a15116f2012dc026561953c94e521b622421f046edf202d1bb7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f5149cde57620a15116f2012dc026561953c94e521b622421f046edf202d1bb7.exe
Resource
win10v2004-20231215-en
General
-
Target
253a03bcc1cc33b7e8fb57ad66f6fdd1.bin
-
Size
37KB
-
MD5
ec25cbb1ed44038652be8a84e3e3efde
-
SHA1
ade0c02bae533afe28a514e1af6ba8d368d86bd6
-
SHA256
624a7a1b44a90ef8c5af56f9558b6b481722fe40973d75d08a9e918c0943b9c3
-
SHA512
eb66964f08c6261bbde8df92a4b140e16cb87fd9b8f47165e73783da6ddbc64d200696f1ca1ce5067f5a03bd65f89a951cf7b2a99726b38a05d14962e9d5c7b4
-
SSDEEP
768:CxhmbdRwZUHUshQ9f1aoW5xz5N2KAuLHABlMXPfLnpPga4bHihkypLvCH:6hwdRwZUHUD9Bixz5kKjk6xwbH4kypL0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/f5149cde57620a15116f2012dc026561953c94e521b622421f046edf202d1bb7.exe
Files
-
253a03bcc1cc33b7e8fb57ad66f6fdd1.bin.zip
Password: infected
-
f5149cde57620a15116f2012dc026561953c94e521b622421f046edf202d1bb7.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 161KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ