Static task
static1
Behavioral task
behavioral1
Sample
6d403993569310692ad2442da4bbe4a85314d6189b6ff8031aab8c90da1c1c82.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6d403993569310692ad2442da4bbe4a85314d6189b6ff8031aab8c90da1c1c82.exe
Resource
win10v2004-20240412-en
General
-
Target
c9623723f265d9d43252501ee44cfbd3358d3cee1cf3f4ec8a813c6d69a1f9df
-
Size
644KB
-
MD5
f177b49be4cc907ee44775f48ad8454d
-
SHA1
95dba505ffe9ac1b314ba335dd4965a8b2736892
-
SHA256
c9623723f265d9d43252501ee44cfbd3358d3cee1cf3f4ec8a813c6d69a1f9df
-
SHA512
238fa9dc6de217aa186cc634c4be0c9b2b3c64bfad15de83093ff211a662ab0313dfe4c987df4d8356169e3f79d452ef9ae42fe9698fd05eaddfefd6156700ed
-
SSDEEP
12288:82fLqOKTO5XuYy5BRvZJP9k8n59rYyC8cMQE8qLG1KtSeC0a:xzkTY+YyblZJFk8n590yCHjZ1d0a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/6d403993569310692ad2442da4bbe4a85314d6189b6ff8031aab8c90da1c1c82.exe
Files
-
c9623723f265d9d43252501ee44cfbd3358d3cee1cf3f4ec8a813c6d69a1f9df.zip
Password: infected
-
6d403993569310692ad2442da4bbe4a85314d6189b6ff8031aab8c90da1c1c82.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 712KB - Virtual size: 712KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ