Static task
static1
Behavioral task
behavioral1
Sample
60403226eab2c0804d72c9af7892289d728c8e601ca6bde6d9c09cd51c5ba6d3.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
60403226eab2c0804d72c9af7892289d728c8e601ca6bde6d9c09cd51c5ba6d3.exe
Resource
win10v2004-20240226-en
General
-
Target
8678ba824a22ad10d1e154aaf87d88f5af8a2b37dce04344e7f10443d562eaa0
-
Size
614KB
-
MD5
13ba591ee014066d59dbd49ddf235732
-
SHA1
3b251257a7cf53d1fb0cf3f95dbf7a0abe508bf9
-
SHA256
8678ba824a22ad10d1e154aaf87d88f5af8a2b37dce04344e7f10443d562eaa0
-
SHA512
6a2b04d6f0ffdb0e8a2c825ea2ae1c74819271bad275de1b8e3ba9b4bcda370ff3b8267c5020a86f706b55fc8dfd4fdb17ff721bcd364d6d36f0804ab533e02d
-
SSDEEP
12288:mrOI6kfsY+uMfm+jCfGJh/hh4oBIzoiOSKG:mrV6cQ8+Wyh/hhpBIUiOSR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/60403226eab2c0804d72c9af7892289d728c8e601ca6bde6d9c09cd51c5ba6d3.exe
Files
-
8678ba824a22ad10d1e154aaf87d88f5af8a2b37dce04344e7f10443d562eaa0.zip
Password: infected
-
60403226eab2c0804d72c9af7892289d728c8e601ca6bde6d9c09cd51c5ba6d3.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 629KB - Virtual size: 628KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ