Static task
static1
Behavioral task
behavioral1
Sample
ee0c5f720625ad1cd24714bf731e85419098b62c6f335af5e296342ec65c7a23.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ee0c5f720625ad1cd24714bf731e85419098b62c6f335af5e296342ec65c7a23.exe
Resource
win10v2004-20240412-en
General
-
Target
2226d26e14a4b9a35a6ef7feaba881967d13aeec5177ed79c3355cfd73e05634
-
Size
251KB
-
MD5
cee5dc3adb45fc38d692a6396ab904a2
-
SHA1
bf54fbac5231d8852ff8af447ad530a165383a3a
-
SHA256
2226d26e14a4b9a35a6ef7feaba881967d13aeec5177ed79c3355cfd73e05634
-
SHA512
736c86ad71f770831ff9040b276b6b68c4aae211d5c565a3442b64c552b7bc569da4937c7ab003c016874e12e5e7a34e4fe6dca0fd5fcafb3a50eb043894b834
-
SSDEEP
6144:jA9uOG3N6CQvog5FXOHEbWqW3a3yKTO25rzyYo:jxMCkHjQ6yOPzNo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ee0c5f720625ad1cd24714bf731e85419098b62c6f335af5e296342ec65c7a23.exe
Files
-
2226d26e14a4b9a35a6ef7feaba881967d13aeec5177ed79c3355cfd73e05634.zip
Password: infected
-
ee0c5f720625ad1cd24714bf731e85419098b62c6f335af5e296342ec65c7a23.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 341KB - Virtual size: 340KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ