Static task
static1
Behavioral task
behavioral1
Sample
7c020900309be3da068072ea96f983b60a3b79fb985e91b2d13b9c2004582f93.exe
Resource
win7-20240220-en
General
-
Target
7c020900309be3da068072ea96f983b60a3b79fb985e91b2d13b9c2004582f93.zip
-
Size
83KB
-
MD5
7f94a7384a790af612ca9935541c5384
-
SHA1
c457523a076f4be35d05608ef6b9dd9cd0cf69dd
-
SHA256
2ca3c1a91cff3c199eb5708413b630c28f76a642f1e94d8809317d33e81ddf0a
-
SHA512
db6e1137a1987cdec337fb9463276070c94188e142a84ab10fde5ddde3908b0cf4a0b48cbde7af41d64f7ac4257c2f1c0a1721d06b050899506cf54f91395beb
-
SSDEEP
1536:ojGXtfA6m+fDwtkmAOuRPNbfNW7zgEjNHRH6Jy7OdSbJ+qX+VK80T2FchN/:zfAl+LwtkhlFgkC0IOdS9X+VnUSch1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/7c020900309be3da068072ea96f983b60a3b79fb985e91b2d13b9c2004582f93
Files
-
7c020900309be3da068072ea96f983b60a3b79fb985e91b2d13b9c2004582f93.zip.zip
Password: infected
-
7c020900309be3da068072ea96f983b60a3b79fb985e91b2d13b9c2004582f93.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ