Static task
static1
Behavioral task
behavioral1
Sample
0415cad6fdc37b6ef123d454f71afbb74f7d1a4865498606f3f6b7d12b1eb100.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0415cad6fdc37b6ef123d454f71afbb74f7d1a4865498606f3f6b7d12b1eb100.exe
Resource
win10v2004-20240412-en
General
-
Target
afafa9b39d5863cc22c5c14caf9af5f6ec49f1a8704a5fef328a2410be0cac3b
-
Size
473KB
-
MD5
2dfbdeeba48d773500c1db32ebffb2d8
-
SHA1
0aa955d7ca7a2efffa85605929df9caf3783ddb1
-
SHA256
afafa9b39d5863cc22c5c14caf9af5f6ec49f1a8704a5fef328a2410be0cac3b
-
SHA512
d839edb1a7fc9c9e3a4374b08a9a44aaaae9ffdba64a609528602d3e2a057f570decdb8439b47ba82f846ef4d87f958e1cafd9a24e13e77e6763f08049f8e16c
-
SSDEEP
12288:BjNKgwIv4zGRFggNCwQ5NvMOqkeFb59ETYpnt77TNSHEeu:ZN5pvOGRFtNONvM/FOYpntpSru
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/0415cad6fdc37b6ef123d454f71afbb74f7d1a4865498606f3f6b7d12b1eb100.exe
Files
-
afafa9b39d5863cc22c5c14caf9af5f6ec49f1a8704a5fef328a2410be0cac3b.zip
Password: infected
-
0415cad6fdc37b6ef123d454f71afbb74f7d1a4865498606f3f6b7d12b1eb100.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 482KB - Virtual size: 481KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ