Static task
static1
Behavioral task
behavioral1
Sample
80f85a304c4c55f89fcfe941a5bfa1923a766dca4080f9811535c4c51d90da6c.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
80f85a304c4c55f89fcfe941a5bfa1923a766dca4080f9811535c4c51d90da6c.exe
Resource
win10v2004-20240412-en
General
-
Target
e6e4e79937d8022587556b51e32b7b4caecae20a53967978ff2b5c35ab747b36
-
Size
647KB
-
MD5
de81c1a291bea2a3853d50ccab9357af
-
SHA1
a99fd2c6526da332a535d7aaa917a4bfe3168cbe
-
SHA256
e6e4e79937d8022587556b51e32b7b4caecae20a53967978ff2b5c35ab747b36
-
SHA512
14206e7658ec9aadbee876330bb521c6f90676ed28a25a21f027239db30c95451f06a2988b8e01467a89b2ddae9514b38eb70b64753bf008cb330023a671d48a
-
SSDEEP
12288:E+WkAiUTz/etYL75n23lPmFIGgEDaXEm5LawZcMW0jFV+sHKsWOaC4bp5dOAn:EAAiUTzWU521PmFZaEmxaY1rFssbWOIn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/80f85a304c4c55f89fcfe941a5bfa1923a766dca4080f9811535c4c51d90da6c.exe
Files
-
e6e4e79937d8022587556b51e32b7b4caecae20a53967978ff2b5c35ab747b36.zip
Password: infected
-
80f85a304c4c55f89fcfe941a5bfa1923a766dca4080f9811535c4c51d90da6c.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 692KB - Virtual size: 689KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ