Static task
static1
Behavioral task
behavioral1
Sample
f1ac86388ffe376b99f91b580e0d31128f385954d790121561717ed6bbb6561b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f1ac86388ffe376b99f91b580e0d31128f385954d790121561717ed6bbb6561b.exe
Resource
win10v2004-20240226-en
General
-
Target
707b90ec211ff5a1c9292f80fdee0b36.bin
-
Size
693KB
-
MD5
7a81c94a74aff61e2fb48ab633daa1fc
-
SHA1
5f61c6c09e95fc3d10c6db4a70ffb3e902007a0c
-
SHA256
2763cdab768885c25996fbcd527bb9f63f5cbb1bd60861f5463f7c25e46d9025
-
SHA512
74e87f0c0da56e0645c60761b1183cd1b5f47b9ee67d95bc6416793b75f057e094b31f1f3ccba45b45205aaf4b30e2e277b91f50b1e1419b39b37e12c32e0df8
-
SSDEEP
12288:sMQ6LFTDg/aWH+FJBGAnn3gG/Sp8wA07DQuMGvwSh6p3HAAPzmw1nTet:sMxlDg/aWenp5Kp8wAvbGYY6RgAP31nm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/f1ac86388ffe376b99f91b580e0d31128f385954d790121561717ed6bbb6561b.exe
Files
-
707b90ec211ff5a1c9292f80fdee0b36.bin.zip
Password: infected
-
f1ac86388ffe376b99f91b580e0d31128f385954d790121561717ed6bbb6561b.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 826KB - Virtual size: 826KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ