Static task
static1
Behavioral task
behavioral1
Sample
2320bdd2ef439c3c079ecf8c1c89ff9e8d2c20ed47f459c29186b00c476fa7d4.exe
Resource
win7-20240221-en
General
-
Target
74c89ec0d0e2879927c2e08b8216ae502325bbea938691773dc066dabbe4f046
-
Size
940KB
-
MD5
d1a7375c16b421ab88bfb7d6fb3cc1c2
-
SHA1
71ace8b749594977b1b40a8b4c2581aadcac23ea
-
SHA256
74c89ec0d0e2879927c2e08b8216ae502325bbea938691773dc066dabbe4f046
-
SHA512
927c4ff71a4734a4f08804e36e18dd5b360a0256b64080a283e4523c97c908f781f840503906941c15cf2b15e87516a9d3b927cfa4f14e4839012a5d6be75111
-
SSDEEP
24576:FWh0KQkpqBy/Cy5SQi8BBQvolhRvkENBP6UCw6P1f:sh0KQ2qBy//SQ5QYhLNBHCw6PJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2320bdd2ef439c3c079ecf8c1c89ff9e8d2c20ed47f459c29186b00c476fa7d4.exe
Files
-
74c89ec0d0e2879927c2e08b8216ae502325bbea938691773dc066dabbe4f046.zip
Password: infected
-
2320bdd2ef439c3c079ecf8c1c89ff9e8d2c20ed47f459c29186b00c476fa7d4.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 960KB - Virtual size: 958KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ