Static task
static1
Behavioral task
behavioral1
Sample
Z0TDnSmWvjf75h4HtUCposi.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Z0TDnSmWvjf75h4HtUCposi.exe
Resource
win10v2004-20231215-en
General
-
Target
Anfrage BE63626635 19_01_2024.iso
-
Size
930KB
-
MD5
ebb4e452a7c7a4f0d789b030ba4fa8e9
-
SHA1
7e5b65f5571e63826195c43df37316a0fb164e5d
-
SHA256
93f8aacfae5819fc299ec1c2a9ca9f7b0304ba1389c9f3cf6669bae05a057762
-
SHA512
96ec9bcc03355fc76be7056bc2d306c10a8063e96ffebd50bbf421520170ffc087f3c001f614883cba70385c934e6eb15aeeee897bbe66d8c019988b426989b9
-
SSDEEP
12288:lh+o6qGbtOu5f1J1AA19XHWUWYOCQeBvaf7oCTuMNDqUOwHsMeRL:lzHGUu/8A1RHWUsCQeBif7ocuMNDCx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Z0TDnSmWvjf75h4HtUCposi.exe
Files
-
Anfrage BE63626635 19_01_2024.iso.iso
-
out.iso.iso
-
Z0TDnSmWvjf75h4HtUCposi.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 729KB - Virtual size: 728KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 150KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ