Static task
static1
Behavioral task
behavioral1
Sample
520bf79393c516e5665eafc36b3d5179b304ece829def596fc5e5708b08e4e59.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
520bf79393c516e5665eafc36b3d5179b304ece829def596fc5e5708b08e4e59.exe
Resource
win10v2004-20240226-en
General
-
Target
d3b41150aa74b10336e56f61ca703eea172e734b1c8724da4f6b5c93064f26f7
-
Size
652KB
-
MD5
48e2ce075da9a30bbbc4e07525f8654e
-
SHA1
eefe2e8f0e654ca77b35525d7d65258abf113bcc
-
SHA256
d3b41150aa74b10336e56f61ca703eea172e734b1c8724da4f6b5c93064f26f7
-
SHA512
f1113aec79cb00a13a604146b2cbf3785c62c9ff3e54c495a5c9ede1ac852f7e20c0ac3c38376658bc25cae9cfd5d56de18b279e161e65942023caed96a1d8a4
-
SSDEEP
12288:y2hhAXRBmEzf5HrAVFEoxQ5GGG+he8l35JzoC2HPBwW+0hPf59dxpi:NAXXz5Hs3E6QfFe8l3552HPBzFxM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/520bf79393c516e5665eafc36b3d5179b304ece829def596fc5e5708b08e4e59.exe
Files
-
d3b41150aa74b10336e56f61ca703eea172e734b1c8724da4f6b5c93064f26f7.zip
Password: infected
-
520bf79393c516e5665eafc36b3d5179b304ece829def596fc5e5708b08e4e59.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1015KB - Virtual size: 1015KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ