Static task
static1
Behavioral task
behavioral1
Sample
d7eab9eb726b311e97b0c71522363b9223f767f7474c5cbf4d9bf0df9c4b909d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
d7eab9eb726b311e97b0c71522363b9223f767f7474c5cbf4d9bf0df9c4b909d.exe
Resource
win10v2004-20240226-en
General
-
Target
1d41d2cba6b4f8e70c0abce1588f8e960f2a642cb3287e34b5cad42ef0ecb778
-
Size
669KB
-
MD5
f6b0ba5e78f481fa9370648b416ea421
-
SHA1
f7a42708cac8ca06ac9628c2ac445891ea705fe8
-
SHA256
1d41d2cba6b4f8e70c0abce1588f8e960f2a642cb3287e34b5cad42ef0ecb778
-
SHA512
8b2354ec4271e95b554b03303c40f2caee0ba35a69f34f48ccc5d380bda119d2bd04adb6b4bf8d00c1a742e8db401eae4169c32cf91592d81245cb0591073c62
-
SSDEEP
12288:zrwHh2C10I5ZIXJtV9L8iZSAJH/Zq23OXkpeWtAzY9Gw4oMuqIkXaFCOIAz5ug:ngDaAZUJtVt8hm/g23LoWufHuqNXgCTi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d7eab9eb726b311e97b0c71522363b9223f767f7474c5cbf4d9bf0df9c4b909d.exe
Files
-
1d41d2cba6b4f8e70c0abce1588f8e960f2a642cb3287e34b5cad42ef0ecb778.zip
Password: infected
-
d7eab9eb726b311e97b0c71522363b9223f767f7474c5cbf4d9bf0df9c4b909d.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 696KB - Virtual size: 694KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ