Static task
static1
Behavioral task
behavioral1
Sample
c14f7a70a3083113154ae0242fd0e14b4c54056cfdb419ec46f3e0471bf0827a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c14f7a70a3083113154ae0242fd0e14b4c54056cfdb419ec46f3e0471bf0827a.exe
Resource
win10v2004-20240412-en
General
-
Target
e1925bde1e23a227a36281f793625ac6b038020a16d4f67c85b500b6c16cbcc5
-
Size
131KB
-
MD5
01a414e2408beb1627edb1a2dbd1ffb6
-
SHA1
c39b9b597ab23a0876785b431f0b3d0a28de8eba
-
SHA256
e1925bde1e23a227a36281f793625ac6b038020a16d4f67c85b500b6c16cbcc5
-
SHA512
4daf84ce2dc3f1a3dc77547ebd1c85bc78c289fad82353ee004ad232d9a8544180a3a8f758af74a729d9f00f566a9f5633714b21e2dbc507b6d343f63973171c
-
SSDEEP
3072:TDG8668KHDFUixHT8+YENr6/2PceYL1ZJd67MBqFNl7:ew8GDF7xgYqP64Bqd7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/c14f7a70a3083113154ae0242fd0e14b4c54056cfdb419ec46f3e0471bf0827a.exe
Files
-
e1925bde1e23a227a36281f793625ac6b038020a16d4f67c85b500b6c16cbcc5.zip
Password: infected
-
c14f7a70a3083113154ae0242fd0e14b4c54056cfdb419ec46f3e0471bf0827a.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ