829e0d966a8de7001c6982c887fbed3e
- SHA256 40fcd2a72f122457634686a6ea06afb98f81a8dcca63c098b9d8aa302602137f
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NOD32K~1.exe
Resource
win7-20231215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
NOD32K~1.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
NOD32K~2.exe
Resource
win7-20231129-en
windows7-x64
10 signatures
150 seconds
Behavioral task
behavioral4
Sample
NOD32K~2.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
9 signatures
150 seconds
General
- Target 829e0d966a8de7001c6982c887fbed3e
- Size 28KB
- Sample240130-ynph5abgh8
- SHA256 40fcd2a72f122457634686a6ea06afb98f81a8dcca63c098b9d8aa302602137f
- MD5 829e0d966a8de7001c6982c887fbed3e
- SHA1 c57729189ee8220c7483a969ff954fe9664951fa
- SHA512 a113b9c63e1087e4eba2083881e82a3abac736c158af61001527d47e97059cd439974e032b7ac6978f9f798c0383acc4b67581af0cefea13e14f3f9d46eeb136
- SSDEEP 768:i2poQmSSWOH0zUdPbD7xSkbqbqmdsLmOm1FwQ98rWD:fmSSWOHyUlbxSwqJKZuFwQKG
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/NOD32K~1.EXE unpack001/NOD32K~2.EXE
File Explorer
-
829e0d966a8de7001c6982c887fbed3e.cab 28KB
-
NOD32K~1.EXE.exe 23KB
-
NOD32K~2.EXE.exe 28KB
NOD32K~1.EXE
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 93749ef64d97300a04284af755350ca95fa387f3b0f5b3ddfa18f56d3dca2702
- MD5 e757e65f376c160be8cf3f4c6bd00b2e
- SHA1 f08348f37dd5fe011f56b8effce0df2e7cc14794
- SHA512 00cb69630adaee6d50bce0b026ce3ecd8482ba776ebd1c5c78edb5b152b48a31d252a34aef5420f67e0ebd67206565120d2f9eea98f252d8f22c5711fa74cb5d
- SSDEEP 384:biok07ic/8AN3yS7sJWxWs/mUL+nSW8v7w+WIWayJLf45GJTfM8hT55WyXF:8QtN3yS4O//L+SW8vVGNCyX
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
26350
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Documents and Settings\Administrator\Local Settings\Application Data\Temporary Projects\WindowsApplication1\obj\Release\WindowsApplication1.pdb
mscoree
_CorExeMain
Name
.text
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
199B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
NOD32K~2.EXE
- IMPHASH 5f4193beb15dc5dfd5e7fffa64e3d01c
- SHA256 af913ac788b8e57ec5159823e9632140853f605bc894e0fa5e533a1d10d49538
- MD5 a37725f2ef975a20b7026a2bfe26298c
- SHA1 19ad435ef416b523dfe09834a241df2e3478f2bf
- SHA512 dda2894ee5dea956d8899817bb0d5ead8dea7680b35c7d2230c9d5f88055ddc4f6ebf6fdf0d770ef34dac378ada668dc63a1d48cdbffc7e0f9362bfb0f40d32c
- SSDEEP 384:pqT1zR3uHfghhfkyirp47Xjnbr75m8pwFuLRB6R800yy:2TUeTTJZwFuS55y
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4212
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvbvm60
ord187
ord516
ord631
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord537
ord644
ord100
ord431
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=13, version=8169,