Static task
static1
Behavioral task
behavioral1
Sample
4c988891326eea9e5fe8aeaa93ffb3f7001bd3cda048a72ab24c8b54dd1834e4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4c988891326eea9e5fe8aeaa93ffb3f7001bd3cda048a72ab24c8b54dd1834e4.exe
Resource
win10v2004-20240412-en
General
-
Target
a8c511855e3b90fe68f9da3547e1ec0f497742d77355b7fae91cf21a356a0f2a
-
Size
718KB
-
MD5
93d5a48f4ad9c23e04a5e504cd2515cf
-
SHA1
b049a0ba0817f2faf499697a70b176effb3765fd
-
SHA256
a8c511855e3b90fe68f9da3547e1ec0f497742d77355b7fae91cf21a356a0f2a
-
SHA512
a2940016c3a2185988203c3efedb8948a9effb3d5bb6f681d10d9d2c067c39e1ddc177247f99fc3b38351cbd1cd8048f6a3679db80e54b0e744645fc0504f6fc
-
SSDEEP
12288:VzlUwoPMva1Vv/vR7dd67HcVyJJwtG2y4hhMxqYyZ4I5gsfLPiOV:Vze0mVvnR36zcVkJwtG2ywMcYi5g6Pik
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/4c988891326eea9e5fe8aeaa93ffb3f7001bd3cda048a72ab24c8b54dd1834e4.exe
Files
-
a8c511855e3b90fe68f9da3547e1ec0f497742d77355b7fae91cf21a356a0f2a.zip
Password: infected
-
4c988891326eea9e5fe8aeaa93ffb3f7001bd3cda048a72ab24c8b54dd1834e4.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 916KB - Virtual size: 915KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ