Static task
static1
Behavioral task
behavioral1
Sample
17d2d7a34d73f7c0f2d2cafb81b6ba1cdf8650128e4f4e16b235ee91c055f8ec.exe
Resource
win7-20240221-en
General
-
Target
78a4ec9308c53a378a6d32f2b823144267d2bde9ba40c81a7c59a36de951e522
-
Size
416KB
-
MD5
6e0f0a1a63873071f9493bf1530f053c
-
SHA1
d67637bac11b68444dcc6d474720e0b9307fac35
-
SHA256
78a4ec9308c53a378a6d32f2b823144267d2bde9ba40c81a7c59a36de951e522
-
SHA512
b08976622eca036095503344fdf982171a321002114a5a5bef0549334dacd07ca1de13ebe72f3901275f5be84908d48add452128e6ade70b2cec61b692866ed0
-
SSDEEP
12288:wbwimIYTgPsDIjMXObfXKKuYDEqhoCo8aWah:wRPYTgP0IjgObfwGEqhNo8E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/17d2d7a34d73f7c0f2d2cafb81b6ba1cdf8650128e4f4e16b235ee91c055f8ec.exe
Files
-
78a4ec9308c53a378a6d32f2b823144267d2bde9ba40c81a7c59a36de951e522.zip
Password: infected
-
17d2d7a34d73f7c0f2d2cafb81b6ba1cdf8650128e4f4e16b235ee91c055f8ec.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 418KB - Virtual size: 417KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ