Static task
static1
Behavioral task
behavioral1
Sample
61d2d93c84dfd913dbb976c21fdd3d87dd3100e9035e4dd04b3c5f4c3c705085.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
61d2d93c84dfd913dbb976c21fdd3d87dd3100e9035e4dd04b3c5f4c3c705085.exe
Resource
win10v2004-20240412-en
General
-
Target
86994d3f5bfd356c14040ffc3226e7d01dbf5fb77f7e982126d67263e76b566e
-
Size
472KB
-
MD5
3755acf926afc8b6a14319951054b65b
-
SHA1
4828f78187b99e1da61817d14c7c92bc7162888b
-
SHA256
86994d3f5bfd356c14040ffc3226e7d01dbf5fb77f7e982126d67263e76b566e
-
SHA512
384a57598a67387a8be96c42c560ddf36cad883e346a1af88cd5fafc734a3e72cd0f2906ef4498dbee5a235dbc8ba0bf8c7c5fa537a2a74352533e03c8d4be56
-
SSDEEP
12288:AZrIhJz5YI+AKw8JC5MrmRTw/jf7PBfJXX1uMkQafahBo/Yy:AZEmJC6KRc/JJl37afaDA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/61d2d93c84dfd913dbb976c21fdd3d87dd3100e9035e4dd04b3c5f4c3c705085.exe
Files
-
86994d3f5bfd356c14040ffc3226e7d01dbf5fb77f7e982126d67263e76b566e.zip
Password: infected
-
61d2d93c84dfd913dbb976c21fdd3d87dd3100e9035e4dd04b3c5f4c3c705085.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 487KB - Virtual size: 486KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ