Static task
static1
Behavioral task
behavioral1
Sample
7b81d965742ebea30ef559e762675b7f9ff1a4f16308ab72119ad6d89e25ec06.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7b81d965742ebea30ef559e762675b7f9ff1a4f16308ab72119ad6d89e25ec06.exe
Resource
win10v2004-20240226-en
General
-
Target
7c13aa4ce9604771fd20f431bd1b1d0d.bin
-
Size
265KB
-
MD5
8e6f61b0acda95077a5321b977d633c6
-
SHA1
046d44dfc63faabb548c8ecded2e9d6e22bad7d5
-
SHA256
7f83efeba37028f237a04b4a1f58e0edef023dd17806b2841f3803d1ac0d3dea
-
SHA512
ea4759005474031e43e8aa027823983702678f7fcb4130fd7acbdf7eabb9a0c3537eb7a5d897fdc824460df5b4f5098931c072a3e6fbfeeb4ca72a4da9d0ba63
-
SSDEEP
6144:IEZRilJsDeP1Nvz2hYLTQwVa41uZWUcw0oGp46B9t9VMhNh1xpmkI3:ZRiXN7bkiuZWUcw0Y6vVMhpk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/7b81d965742ebea30ef559e762675b7f9ff1a4f16308ab72119ad6d89e25ec06.exe
Files
-
7c13aa4ce9604771fd20f431bd1b1d0d.bin.zip
Password: infected
-
7b81d965742ebea30ef559e762675b7f9ff1a4f16308ab72119ad6d89e25ec06.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 346KB - Virtual size: 346KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ