Static task
static1
Behavioral task
behavioral1
Sample
9a2f315bd234cc0164ba240137b92ccdc3736e2f39474f32a57e037e87e73498.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9a2f315bd234cc0164ba240137b92ccdc3736e2f39474f32a57e037e87e73498.exe
Resource
win10v2004-20240412-en
General
-
Target
79fc5c110ac5b02f77ecf7557df53f8fc6a47aecfe0be5a985877b1feb3a16e5
-
Size
663KB
-
MD5
13165cb37056984625ae2dcfe926bd7b
-
SHA1
6e32f5a3742c4e1cb63d21488267c774a60e6606
-
SHA256
79fc5c110ac5b02f77ecf7557df53f8fc6a47aecfe0be5a985877b1feb3a16e5
-
SHA512
3bd94b7e67b0b71ec4202b181f16d29ceade4e6a6da84dc25ddf0ec2f994ed7da8bc3bfceac1adf8c132d6a1d7e9f09b933ad2b50672f91556146316896e3ac2
-
SSDEEP
12288:8cSDLJuo5XdKNg2B6CGQKc0FV6F2mnA7HjQgu4qh8i4ud7qnPvHmPAibR4b3ho17:8bLJu5+2B6CrKc8JmnTOqh8i0PO4iNc0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9a2f315bd234cc0164ba240137b92ccdc3736e2f39474f32a57e037e87e73498.exe
Files
-
79fc5c110ac5b02f77ecf7557df53f8fc6a47aecfe0be5a985877b1feb3a16e5.zip
Password: infected
-
9a2f315bd234cc0164ba240137b92ccdc3736e2f39474f32a57e037e87e73498.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 713KB - Virtual size: 713KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ