Static task
static1
Behavioral task
behavioral1
Sample
contract YF8536851-1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
contract YF8536851-1.exe
Resource
win10v2004-20231215-en
General
-
Target
7bcd44891633650802028e7cd21cf7a5
-
Size
472KB
-
MD5
7bcd44891633650802028e7cd21cf7a5
-
SHA1
f1bd871859650ac027495db14056b71c9997d14b
-
SHA256
d78d85bfb1d5f164701a9f8f74eff5d45ceb0e2b8a712f4883ab3747d78badf6
-
SHA512
6df2cca5ffd6b5da88fd8a69479c8895025b865d8f26b4f161135fefeed3d7057a6a53a4e800ee360bf33ba06ce60138473a889096b19601feafd8f9c4b8f45c
-
SSDEEP
12288:lj/7A8KvLlPCwGbKXx8Icg94f+JnjclvVok:Z/7ArVCUhXcgXJnol9ok
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/contract YF8536851-1.exe
Files
-
7bcd44891633650802028e7cd21cf7a5.zip
-
contract YF8536851-1.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 625KB - Virtual size: 624KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ