Static task
static1
Behavioral task
behavioral1
Sample
b3edb6fa852b4c1f95fa45e52660f1854a5da92413136600529cb5705e5c36f1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b3edb6fa852b4c1f95fa45e52660f1854a5da92413136600529cb5705e5c36f1.exe
Resource
win10v2004-20240412-en
General
-
Target
0777b08ed9f9ec054e416c5f777a16bf6faa6fe9799be5e63d311019a433c806
-
Size
150KB
-
MD5
a6fd79b7931ac560b4896babd1960666
-
SHA1
b11b1c583088384deb251ccd5623c7e5726b1a61
-
SHA256
0777b08ed9f9ec054e416c5f777a16bf6faa6fe9799be5e63d311019a433c806
-
SHA512
3fa3fedcd5b48c47d51e0a058d3e5b6b2c0999715991c2421cfd0ec2fbe8e823fa3f4265b44758ac652e16f1f8a6c9c0a761583e8ecde528283029c330faba11
-
SSDEEP
3072:8nf5fQwznsF6AUuCL8ejCST0CtAk1H8IIzc6ae:if9QwznsF6eC5OSLKkZ8Mbe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b3edb6fa852b4c1f95fa45e52660f1854a5da92413136600529cb5705e5c36f1.exe
Files
-
0777b08ed9f9ec054e416c5f777a16bf6faa6fe9799be5e63d311019a433c806.zip
Password: infected
-
b3edb6fa852b4c1f95fa45e52660f1854a5da92413136600529cb5705e5c36f1.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 181KB - Virtual size: 181KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 137KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE