Static task
static1
Behavioral task
behavioral1
Sample
Capture 2024-01-16 à 06.15.45.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Capture 2024-01-16 à 06.15.45.exe
Resource
win10v2004-20231215-en
General
-
Target
386c8ecec9da6d2ce5503a9846f787bb.bin
-
Size
676KB
-
MD5
d0abf4f9d79709ed8236e69ef92a70f7
-
SHA1
16ec7f79b7a6873f09c29e19f11a8f220b255459
-
SHA256
1f44821b02c39763fd97a7d31e89e03c13f7de038c945bc90e893ff3e128c97b
-
SHA512
52e6c2e12d72136499f419e955697e48431cb4005cdb14fcd229f84492a9d8538c46475c3756aeb9e63ccf8a4484257041670a670b24d150d421f47886fb31fd
-
SSDEEP
12288:BJZ5bvz8Zv0giXmYKmNEzwPUeYI7nmpdnGpOCKMiWLvvN9zE+tKcU5rykycwG:BJZEv055KmNwYYI7nmpJGpHRLvVRE+2z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Capture 2024-01-16 à 06.15.45.exe
Files
-
386c8ecec9da6d2ce5503a9846f787bb.bin.zip
Password: infected
-
49418aa944c8f7876f3b81d707dd2eb87f05a9beaef6ecc1251ca57888dfeec0.iso.iso
Password: infected
-
Capture 2024-01-16 à 06.15.45.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 697KB - Virtual size: 697KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ