Static task
static1
Behavioral task
behavioral1
Sample
522df31fa6822a48a743918cc4371daaa6ca5aade2713ddf6e4a7726c78d54a7.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
522df31fa6822a48a743918cc4371daaa6ca5aade2713ddf6e4a7726c78d54a7.exe
Resource
win10v2004-20240412-en
General
-
Target
962ae802c48a6983795f705e6bb9ffbab242dc79454a75f45dddda2b5e645994
-
Size
650KB
-
MD5
06d7f4629018b014d44323df50fb1389
-
SHA1
161987f3c762e38b760342b4912dc2d0f9db3898
-
SHA256
962ae802c48a6983795f705e6bb9ffbab242dc79454a75f45dddda2b5e645994
-
SHA512
c4d9d63caf1a0013647576764076701518ea87993b56c38ab6b5516b9b59c0641c761df790d0704173314a84eab98455419c4223f96761a0443a46549907e57b
-
SSDEEP
12288:w+wf9MDvvGSo0p2iueO9An0piAl5xWxvK9nNCI+V/DviBMU0oH:wXMySl1R4iAgxvKWL7iBl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/522df31fa6822a48a743918cc4371daaa6ca5aade2713ddf6e4a7726c78d54a7.exe
Files
-
962ae802c48a6983795f705e6bb9ffbab242dc79454a75f45dddda2b5e645994.zip
Password: infected
-
522df31fa6822a48a743918cc4371daaa6ca5aade2713ddf6e4a7726c78d54a7.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 644KB - Virtual size: 644KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ