Static task
static1
Behavioral task
behavioral1
Sample
2e2f674241de56d4404a8fdbcb470fd9738d48c855fb0785deaae99ea3af383f.exe
Resource
win7-20240221-en
General
-
Target
4256cc1b83ca3d4bc64680ad73094b3ee7775cae21cbb7f1a1d421b63cb0ebb2
-
Size
773KB
-
MD5
6c74281095f7e57d4d7167a86148c89a
-
SHA1
b9a7cfe809199073f53c0ba59b64099f0fb59da7
-
SHA256
4256cc1b83ca3d4bc64680ad73094b3ee7775cae21cbb7f1a1d421b63cb0ebb2
-
SHA512
6c6d1152841bb1d05df9e20374661c8471bee8fb9dd7c78cd586827119cd2f82d021dd3677fe76c6ff1ac0cb7b8304f37e6ad43a4cc6b2ab066b65c93080fded
-
SSDEEP
24576:bWj671w1Uf7lkXL635MLLUrgLoa3LOHEYERs7dQ/T:b4ODqX+JuL9PKkYERs6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2e2f674241de56d4404a8fdbcb470fd9738d48c855fb0785deaae99ea3af383f.exe
Files
-
4256cc1b83ca3d4bc64680ad73094b3ee7775cae21cbb7f1a1d421b63cb0ebb2.zip
Password: infected
-
2e2f674241de56d4404a8fdbcb470fd9738d48c855fb0785deaae99ea3af383f.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 994KB - Virtual size: 994KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ