Static task
static1
Behavioral task
behavioral1
Sample
b55734d89184434a24d04af85019fd34dc0b054f13d8fb1a16ee977aea723217.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
b55734d89184434a24d04af85019fd34dc0b054f13d8fb1a16ee977aea723217.exe
Resource
win10v2004-20240220-en
General
-
Target
8333a0979453a3109de58b089b1e3813.bin
-
Size
139KB
-
MD5
b7e29bc22d96e99851c1ff0d649d3aa9
-
SHA1
c0877fd0e7f4d29fb8a728f870d3f7714e96f1b7
-
SHA256
8a5e74c6603f902fdedcffc5e12828008c818f1cd426fb27ad4e4696fd77e69c
-
SHA512
2d10451c7baf2b092ca5b6aea4ef0af1aa569613158ffb89c9c9719901f14466f8af350646dbefbc6ba5a48b37c90a45df47847232b3c5dfdb4f04fa01004101
-
SSDEEP
3072:PqZIo4K0Ms7zeKJkBCV4sl16y5WVJha4sa0J3tHLv5OHK7iyMd/X6mL:iZz4os7zpatdKWc4shJjkEhMdvlL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b55734d89184434a24d04af85019fd34dc0b054f13d8fb1a16ee977aea723217.exe
Files
-
8333a0979453a3109de58b089b1e3813.bin.zip
Password: infected
-
b55734d89184434a24d04af85019fd34dc0b054f13d8fb1a16ee977aea723217.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 315KB - Virtual size: 315KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ