Static task
static1
Behavioral task
behavioral1
Sample
0c3373a5e123168418527cbedd16eb5d67733250147686616165092de8ae073b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0c3373a5e123168418527cbedd16eb5d67733250147686616165092de8ae073b.exe
Resource
win10v2004-20240226-en
General
-
Target
0c3373a5e123168418527cbedd16eb5d67733250147686616165092de8ae073b.zip
-
Size
754KB
-
MD5
730ea1cb8a073461b15fb5224976a580
-
SHA1
24a0d86f6be0778537adb6932568d071887c095a
-
SHA256
120f21177fcd471c2cdb4df5f5248458d9b1708e812e6c4e144a9092e8927fff
-
SHA512
569ced43bcaa66edcef49eb5c799d6e3126e5a7d27d6dfec175f80a486cf507637ee963b7270c6b16fe5deea91d09e43f363fa2ab629ab764cbb802f820ec618
-
SSDEEP
12288:Mnwb3KUoSqulDD5HT71AG5KOjETpBc6LQs2LQS9TlxaHaEkiu4w3vRojVdsNn:Vb3KLu1FTb5mTpxMsqF9Tlxa6JSQ5oJ4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/0c3373a5e123168418527cbedd16eb5d67733250147686616165092de8ae073b
Files
-
0c3373a5e123168418527cbedd16eb5d67733250147686616165092de8ae073b.zip.zip
Password: threatbook
-
0c3373a5e123168418527cbedd16eb5d67733250147686616165092de8ae073b.exe windows:4 windows x86 arch:x86
Password: threatbook
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 843KB - Virtual size: 842KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ