Static task
static1
Behavioral task
behavioral1
Sample
ad7131b66e0218e87b565bebac20995ac672871eb45d17b0c7a41afd28d0fb0b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ad7131b66e0218e87b565bebac20995ac672871eb45d17b0c7a41afd28d0fb0b.exe
Resource
win10v2004-20240412-en
General
-
Target
898da9827ae30780f278aea3cb63523f0da041c68221514cd6ebd53a90b9de90
-
Size
649KB
-
MD5
3ef16da3a27d2f31a33ef0f4c5dfe851
-
SHA1
dae3864e06e569f070b541b19f8bfef58e857d38
-
SHA256
898da9827ae30780f278aea3cb63523f0da041c68221514cd6ebd53a90b9de90
-
SHA512
bc73161936490db0268ca892d5492e93c80e2b49c4b307cc343d891c68a4053fa6f3ed493076f973c3522a6ff72950debb269f530ce718e7e399e060cc000553
-
SSDEEP
12288:MD4kjhJV71VmjO7kP1/2jMsFR5hZdfT+I5NMyoiSX4Glf1hbdklgYB5gA:Qj7V5VL7u4MOrh3DFSX4GlfzXYB5f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ad7131b66e0218e87b565bebac20995ac672871eb45d17b0c7a41afd28d0fb0b.exe
Files
-
898da9827ae30780f278aea3cb63523f0da041c68221514cd6ebd53a90b9de90.zip
Password: infected
-
ad7131b66e0218e87b565bebac20995ac672871eb45d17b0c7a41afd28d0fb0b.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 664KB - Virtual size: 659KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ