Static task
static1
Behavioral task
behavioral1
Sample
c35555fbb9f1269bb69eadf51a79548e26752f6f7bb20f92670ecbd17d7d1f49.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c35555fbb9f1269bb69eadf51a79548e26752f6f7bb20f92670ecbd17d7d1f49.exe
Resource
win10v2004-20240226-en
General
-
Target
84a55bde6e58d31758af1dca6460042e.bin
-
Size
650KB
-
MD5
9801012b61276cc12f1d7cf42ffb3a55
-
SHA1
2830527c652bf5ad36ab29c47c9ad6e218506e11
-
SHA256
c41888bef7b4467d1f66d4bb3e06de63aeeb5edbf53f8a49db1a544b63bf0099
-
SHA512
0ee16370c0c184e7cfbba381cd0af9996dfb1a0c3c39b043ff65074c6378697ebdd4bfaed4badd6f5fbf5f71d7e87ed1eebb943cb3e0b5a96c86e69d7aad4c80
-
SSDEEP
12288:9Un7l4ioUWrx4JYTXPcu36m8iE4WqSJlmSvWXNRQHeShcf9ZexMPUMzvOvIK3uJs:en/Wrxl/cu3ltSJtvgfQ+lf9ZeTMzvCj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/c35555fbb9f1269bb69eadf51a79548e26752f6f7bb20f92670ecbd17d7d1f49.exe
Files
-
84a55bde6e58d31758af1dca6460042e.bin.zip
Password: infected
-
c35555fbb9f1269bb69eadf51a79548e26752f6f7bb20f92670ecbd17d7d1f49.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 700KB - Virtual size: 700KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ