Static task
static1
Behavioral task
behavioral1
Sample
2ef3ecd1fa1f4f0bf04bf2b98727fc2b7e36bce45b799a30b38e57c7b89ae824.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2ef3ecd1fa1f4f0bf04bf2b98727fc2b7e36bce45b799a30b38e57c7b89ae824.exe
Resource
win10v2004-20231215-en
General
-
Target
7d4dc99b0ad90aecfc3278686361f1c5.bin
-
Size
17.8MB
-
MD5
61246b01ce8b88d8526d83c3db0e60ab
-
SHA1
04fe37d8e26c273bbc5c08e0876e75cd0658734c
-
SHA256
e644ead9284ac98f61eb504a9e0b71ca1f6b30799174c5dd8a79242e6928fd8b
-
SHA512
c07ac48e122a17704805becc731f33665f734e1ae99ead7f6da53de7e4a52b8aa8954dda97e61b3c1bacb87a2457c5604a6f2e5c1c2915d65902a3973ba4f77f
-
SSDEEP
393216:pn2vbKzQBCvA3xE61j/Wse1w54bt6PxiX0zx3sYZHISCP:p2DKTwE617We3Zd3sYJIv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2ef3ecd1fa1f4f0bf04bf2b98727fc2b7e36bce45b799a30b38e57c7b89ae824.exe
Files
-
7d4dc99b0ad90aecfc3278686361f1c5.bin.zip
Password: infected
-
2ef3ecd1fa1f4f0bf04bf2b98727fc2b7e36bce45b799a30b38e57c7b89ae824.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 18.0MB - Virtual size: 18.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ