Static task
static1
Behavioral task
behavioral1
Sample
821e694b9c4eb2d6ab08b9fbe82f8b6c6965ce8ebd4d9ca08dd4ec0eef941289.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
821e694b9c4eb2d6ab08b9fbe82f8b6c6965ce8ebd4d9ca08dd4ec0eef941289.exe
Resource
win10v2004-20231222-en
General
-
Target
d97a55dfbddee15005fbe1bc65c2895f.bin
-
Size
11KB
-
MD5
4fc358a1cc6aed5c2ef0f6f944e155d0
-
SHA1
8f710da3943245f48e0e95726fcbed43b807cdce
-
SHA256
87d16fd042a7a7d7f0132f3ba5a7f52f83d19a007be65db2a7b8cf0f88e42cda
-
SHA512
ad768b733fb75f7142f2a3ed25a60932ea94452fd1994aa2d9330e3c734bb76020f95aca7b42a57ef3609a96ccb6e445b54da7fdd329b485f3a5538ee8cd613e
-
SSDEEP
192:v7C5NqEx5cfuZLOfnOO3G8E64ydGOCnqs+3GjcVJq0lc2pkpEeznCaHKOoz5NrL/:T2NHxyaOvSnqCnqs+2j1T2upEe+aHKOo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/821e694b9c4eb2d6ab08b9fbe82f8b6c6965ce8ebd4d9ca08dd4ec0eef941289.exe
Files
-
d97a55dfbddee15005fbe1bc65c2895f.bin.zip
Password: infected
-
821e694b9c4eb2d6ab08b9fbe82f8b6c6965ce8ebd4d9ca08dd4ec0eef941289.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ