Static task
static1
Behavioral task
behavioral1
Sample
c14f7a70a3083113154ae0242fd0e14b4c54056cfdb419ec46f3e0471bf0827a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c14f7a70a3083113154ae0242fd0e14b4c54056cfdb419ec46f3e0471bf0827a.exe
Resource
win10v2004-20231215-en
General
-
Target
3b25677fa8107108e47bf97e9df675a6.bin
-
Size
131KB
-
MD5
12a9ef510bdfba87977c18e6156237fc
-
SHA1
120812e55d26df43f4d10e910f7d0348c8ec26a5
-
SHA256
eb363346cfff4269e6496451ee6a22e696f343c239dfa93e4318c8d9eee640f2
-
SHA512
993ebf5d268ee73c380514ad97cbf54de57df0c32c89add9937ad92e495edbf9ab3414cc8e54e32cb8f3c2d7843d05e6ece477f241be4c045499135307a31e00
-
SSDEEP
3072:+wZxzvE+wAUVnSUR4+D/+CHHU6a2ndYI1dJzrqM9Js+tuyr:/zvE+wttS+hnU6a2dH1dJHhJsur
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/c14f7a70a3083113154ae0242fd0e14b4c54056cfdb419ec46f3e0471bf0827a.exe
Files
-
3b25677fa8107108e47bf97e9df675a6.bin.zip
Password: infected
-
c14f7a70a3083113154ae0242fd0e14b4c54056cfdb419ec46f3e0471bf0827a.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ