Static task
static1
Behavioral task
behavioral1
Sample
36b6d1ea82820b0b1675694e3b78bd3e9de13b63e499dcc938fdac27302e57f8.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
36b6d1ea82820b0b1675694e3b78bd3e9de13b63e499dcc938fdac27302e57f8.exe
Resource
win10v2004-20240412-en
General
-
Target
e14e63227d5b6ea60f029fc00c057c1ea929de4ff71d34c6e4dc657a73f4f01f
-
Size
792KB
-
MD5
e25c46a4349c06e5404e5ca910250259
-
SHA1
1e0ec124c6349e71f27f8293fdc28153886dbfb1
-
SHA256
e14e63227d5b6ea60f029fc00c057c1ea929de4ff71d34c6e4dc657a73f4f01f
-
SHA512
7f90b5b67e937a95a5924858bef9c6eb987f490ef90abb1d5cf60840f9173332aa44e93188c295441b8187908c66d2a2ffd3306e0502a5d8e64ec1d5cc2c0fa1
-
SSDEEP
24576:yDYcSDjnMKNJ3zgTC1CdF11QvLbvave2CvTZgTpLXONfC9A:yEc2DHSCEdl6vF161f9A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/36b6d1ea82820b0b1675694e3b78bd3e9de13b63e499dcc938fdac27302e57f8.exe
Files
-
e14e63227d5b6ea60f029fc00c057c1ea929de4ff71d34c6e4dc657a73f4f01f.zip
Password: infected
-
36b6d1ea82820b0b1675694e3b78bd3e9de13b63e499dcc938fdac27302e57f8.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 921KB - Virtual size: 921KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ