Static task
static1
Behavioral task
behavioral1
Sample
27240e11a975190759a1e323fd91f2c92414947086ab813c999845d0332f3c6b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
27240e11a975190759a1e323fd91f2c92414947086ab813c999845d0332f3c6b.exe
Resource
win10v2004-20231215-en
General
-
Target
3c7d710345e5bcc8c5cce3aa4b4c3473.bin
-
Size
702KB
-
MD5
8c5d4a5826d32a1f3d122c7211595d58
-
SHA1
ef04d9b1337f7bc9a38acee84661f7a333c3d21d
-
SHA256
8c628aa86971bdec5f4ec32eac4289f2248598baabf42cc179d243af8e1422d3
-
SHA512
4bb2f73a7de1183c9a3ed3fc1dad126cc4936731624ceb33db2939de7f681de7bc50fe5f8d8226b23014df8db0eba62b078d72113b94bef4f5cbe2facc438105
-
SSDEEP
12288:ucsWuPsQoBph5tDHvUD0n7k78/3cTLqOMZ0ptge7mtmKzksIWnUVMdZY0dR76Vcn:ucBdphLDY07a8/3cTL3MogomsKQsyVSh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/27240e11a975190759a1e323fd91f2c92414947086ab813c999845d0332f3c6b.exe
Files
-
3c7d710345e5bcc8c5cce3aa4b4c3473.bin.zip
Password: infected
-
27240e11a975190759a1e323fd91f2c92414947086ab813c999845d0332f3c6b.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 759KB - Virtual size: 758KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ