Static task
static1
Behavioral task
behavioral1
Sample
63235afcdd767af4bb5bd09488642bbdfb0124e9b4066d00b4815050faae9079.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
63235afcdd767af4bb5bd09488642bbdfb0124e9b4066d00b4815050faae9079.exe
Resource
win10v2004-20240412-en
General
-
Target
69822626c595c1623aba7a7935b6f7f20883a4adb28d233c520025c86009120a
-
Size
677KB
-
MD5
669dd6b2f1fa73e07d0aa9815d679085
-
SHA1
bfdff93ecf265ea2682a0c66e95ec1cca4ef0fb1
-
SHA256
69822626c595c1623aba7a7935b6f7f20883a4adb28d233c520025c86009120a
-
SHA512
51b7820b61aed0ca7bc841ca386932cd6a1d3436bde3d794ca0c4e36bb142259a2a4fb65f3daa99910b875095a460e06fb3b07d69124ab3896101a80628c04c0
-
SSDEEP
12288:cokyCcH38IRYBy3NzQK/JdA6nthvM/3YZdGigRKBllD60Eh/KIZ2Wfw:cokEH3ug3NdfpthCoPVg0Bf+0A74sw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/63235afcdd767af4bb5bd09488642bbdfb0124e9b4066d00b4815050faae9079.exe
Files
-
69822626c595c1623aba7a7935b6f7f20883a4adb28d233c520025c86009120a.zip
Password: infected
-
63235afcdd767af4bb5bd09488642bbdfb0124e9b4066d00b4815050faae9079.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 733KB - Virtual size: 732KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ