Static task
static1
Behavioral task
behavioral1
Sample
07c1a82c5517f92f78a830e12cb1813430c4e02e02c1b6d16cd8d632f80d92f7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
07c1a82c5517f92f78a830e12cb1813430c4e02e02c1b6d16cd8d632f80d92f7.exe
Resource
win10v2004-20240412-en
General
-
Target
a8d0e448bab94cbd8e0005979b1a33b4bec2677651a8d7cfde3b91fb5b738fed
-
Size
335KB
-
MD5
01e42e2f5490451abd604927c69d22a4
-
SHA1
bbb6956de3a34c035ec4bada69c8e0ca1572a5d0
-
SHA256
a8d0e448bab94cbd8e0005979b1a33b4bec2677651a8d7cfde3b91fb5b738fed
-
SHA512
1be81736b8934265c75fb7490b09b7cb6d60dd5808172d6d376aea5feeb4aa16565f91a0b0eec0dae759d8755a75a2a1e654e06cef26847dd1ebdb0906354db5
-
SSDEEP
6144:tIRJTDDeSGxHFEMiduYYnJT1gBdfBCr01X3hrdb6COUGmtSXg3/GRDs4n93bRZdp:teJTDD2fEMYs1cBwEhrd2Bz4SXi/qbdT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/07c1a82c5517f92f78a830e12cb1813430c4e02e02c1b6d16cd8d632f80d92f7.exe
Files
-
a8d0e448bab94cbd8e0005979b1a33b4bec2677651a8d7cfde3b91fb5b738fed.zip
Password: infected
-
07c1a82c5517f92f78a830e12cb1813430c4e02e02c1b6d16cd8d632f80d92f7.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 428KB - Virtual size: 428KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ