Static task
static1
Behavioral task
behavioral1
Sample
sample.exe
Resource
win7-20231215-en
General
-
Target
sample.zip
-
Size
869KB
-
MD5
b40364968635cd470ecbab25db1b76d2
-
SHA1
6e4e0338cc5b229e860096223444b8329e3e8350
-
SHA256
c2a5fe09391d876d31f225c8311fd4ae0f85829983fc5613d0fe46644f6a112f
-
SHA512
9de2b577dc3c11ed7273b62c30463a7b04bac3bab4db18399c5a158d6b2ffa5dce4de5a6f82ba0693cccbd5f0d068af81d900fd042e8090a77bf27eb9a772d6c
-
SSDEEP
24576:dmaX2Rnb+D4cl2A5DrOeie8Kl7EIzZwsB9Pn1pXKTY:dmlGl2mDrl8sbZwsB9P1KY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/sample.exe
Files
-
sample.zip.zip
Password: infected
-
sample.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ