Static task
static1
Behavioral task
behavioral1
Sample
289bddc892160e8976bc0b7e91c76611cfcc9deb51ef25f5a4af387018820d30.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
289bddc892160e8976bc0b7e91c76611cfcc9deb51ef25f5a4af387018820d30.exe
Resource
win10v2004-20240412-en
General
-
Target
d05122420275a66f7914f25e90de66b6043f729def693f0a4f694d858ba8e10d
-
Size
345KB
-
MD5
bad7c54459da9da169703503589d7c49
-
SHA1
5fd2a22eedf87cec1ce1f4ec15a26ef03e2b8590
-
SHA256
d05122420275a66f7914f25e90de66b6043f729def693f0a4f694d858ba8e10d
-
SHA512
dd77de9b8b9797b11c19301e481e7bde6188c36243c56ff392ffc00f90940f8dd7672695215d744fa73e6567b70fb3e6b92e8e07e09735c87905b02899612885
-
SSDEEP
6144:cv9qsqeiMjBw2KVlYqC1sb3IseQYPcszlL5EesB7WfB5q0FJd7v57hbKtFi0ffne:cvYsdy2klV5IsIzR0MB5q03NrO7i0fG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/289bddc892160e8976bc0b7e91c76611cfcc9deb51ef25f5a4af387018820d30.exe
Files
-
d05122420275a66f7914f25e90de66b6043f729def693f0a4f694d858ba8e10d.zip
Password: infected
-
289bddc892160e8976bc0b7e91c76611cfcc9deb51ef25f5a4af387018820d30.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 453KB - Virtual size: 453KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ