Static task
static1
Behavioral task
behavioral1
Sample
9a2f315bd234cc0164ba240137b92ccdc3736e2f39474f32a57e037e87e73498.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9a2f315bd234cc0164ba240137b92ccdc3736e2f39474f32a57e037e87e73498.exe
Resource
win10v2004-20240412-en
General
-
Target
948316f73408d28bb212e4ba87cf62ea88a8cd2cac956ecdad90653cf8c8b0d5
-
Size
663KB
-
MD5
4b61b38c844b31a141b1884f17a2bb3c
-
SHA1
e0bae92a20827d0297e2948d1e1ae54a82afe730
-
SHA256
948316f73408d28bb212e4ba87cf62ea88a8cd2cac956ecdad90653cf8c8b0d5
-
SHA512
689f1353d938a5825e7642d64100d63effcf3331df7fe32c257657f45e79805fec60a30fdcde4d51a7dc448268b90c5ffa37eac9ccd82001d95ef9b729bb9135
-
SSDEEP
12288:tvyzPeerKMAP0Y87eNcxODARwURO8nc6JqVYcspFGCU4KF:ueei8Y5+/RwUQ8c2qVpspFRUP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9a2f315bd234cc0164ba240137b92ccdc3736e2f39474f32a57e037e87e73498.exe
Files
-
948316f73408d28bb212e4ba87cf62ea88a8cd2cac956ecdad90653cf8c8b0d5.zip
Password: infected
-
9a2f315bd234cc0164ba240137b92ccdc3736e2f39474f32a57e037e87e73498.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 713KB - Virtual size: 713KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ