Static task
static1
Behavioral task
behavioral1
Sample
2581c92f9d54cdec17c02ff7b814ee3f7411c4f7c5e6bd1e4ea95431a1217a37.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2581c92f9d54cdec17c02ff7b814ee3f7411c4f7c5e6bd1e4ea95431a1217a37.exe
Resource
win10v2004-20240412-en
General
-
Target
f777eff39a3ec746c10c76e9403d12fe6e206ce4201644286024e558e33fdf6b
-
Size
540KB
-
MD5
684a35ffed453bed1fa2d04f25f0bd5b
-
SHA1
ab3359b11bbcecc5dceec9fae1e5553cf6f508b7
-
SHA256
f777eff39a3ec746c10c76e9403d12fe6e206ce4201644286024e558e33fdf6b
-
SHA512
c01761274bdbfdedeff98daae50b585b0e0ca87aecca5d65ecb9d0185e7c8151753d69f27ac76207d1f87bc2ab514e20cd75e7a573d05056b296cceac30ffb64
-
SSDEEP
12288:uo/j3hqXtY6HtbD+B0FdLM1u4ifWTkFikwc6p:uWj3EXbIVDkYkwc6p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2581c92f9d54cdec17c02ff7b814ee3f7411c4f7c5e6bd1e4ea95431a1217a37.exe
Files
-
f777eff39a3ec746c10c76e9403d12fe6e206ce4201644286024e558e33fdf6b.zip
Password: infected
-
2581c92f9d54cdec17c02ff7b814ee3f7411c4f7c5e6bd1e4ea95431a1217a37.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 554KB - Virtual size: 553KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ