Static task
static1
Behavioral task
behavioral1
Sample
efc5c94996f4af7ae3a2d17dfc73dd7fe3f84269e73bb611e5806f2fd131a646.exe
Resource
win7-20240221-en
General
-
Target
bc89eefe8b6e92ba8da2014e114cc6efb51744ea6198bcb75a0d47ae50f2f576
-
Size
786KB
-
MD5
f9b31b7359c984528b8539cd2310bfd5
-
SHA1
65145efb30ba7fe1fceb745f56c41d90e106f622
-
SHA256
bc89eefe8b6e92ba8da2014e114cc6efb51744ea6198bcb75a0d47ae50f2f576
-
SHA512
9382f02b82b3bece7a090bdbc89b1d3b84a5dabdca49fd97bfcf6b32dec3527efa1b8b419cb45efdd36e07743211043dd1e4a393387d81700617a237f10b1506
-
SSDEEP
24576:bc/3rODfl+epkHOJVkDkAX8UIK+/U6vA7DJZ9Ew:bg3rmQqkHJoUIK+c6vAJZew
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/efc5c94996f4af7ae3a2d17dfc73dd7fe3f84269e73bb611e5806f2fd131a646.exe
Files
-
bc89eefe8b6e92ba8da2014e114cc6efb51744ea6198bcb75a0d47ae50f2f576.zip
Password: infected
-
efc5c94996f4af7ae3a2d17dfc73dd7fe3f84269e73bb611e5806f2fd131a646.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 923KB - Virtual size: 922KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ