Static task
static1
Behavioral task
behavioral1
Sample
a533e98a86c878c9eeb075acf501ff5f27641b9677ea1a2b11ef65823cbaf1b5.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a533e98a86c878c9eeb075acf501ff5f27641b9677ea1a2b11ef65823cbaf1b5.exe
Resource
win10v2004-20240412-en
General
-
Target
203a6d2e2504c4358f3523fd512cc9ae8b3787078905df238bcf13e1babb0560
-
Size
577KB
-
MD5
fac2b379b426a28b08cb585c543701e2
-
SHA1
4d5e702a814992d6fa741f5cf43ffc3251606376
-
SHA256
203a6d2e2504c4358f3523fd512cc9ae8b3787078905df238bcf13e1babb0560
-
SHA512
caba5ab5bda4ce67f2aa89a5cdbbda737fbefa6453ac8588a84c2c0b3b0417a58e1a6f788778e5bf69778341aad72459f85b4ceb9a4df79996065766014464fb
-
SSDEEP
12288:cAqmgCu9GPslCXSH/06o2DOKBp/IIoYoGgaSRQm1VQ7DWtFLD:pqm9u9GklCg/06ooOKjcFGgdf030FH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a533e98a86c878c9eeb075acf501ff5f27641b9677ea1a2b11ef65823cbaf1b5.exe
Files
-
203a6d2e2504c4358f3523fd512cc9ae8b3787078905df238bcf13e1babb0560.zip
Password: infected
-
a533e98a86c878c9eeb075acf501ff5f27641b9677ea1a2b11ef65823cbaf1b5.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 668KB - Virtual size: 667KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ