Static task
static1
Behavioral task
behavioral1
Sample
2af994c5d5625be98c89248dca5bce26a40debf6b3c7b3b775a5ae916427a18b.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2af994c5d5625be98c89248dca5bce26a40debf6b3c7b3b775a5ae916427a18b.exe
Resource
win10v2004-20240412-en
General
-
Target
c7d7a2cad0c18406bd0370727549b00ad27c041526e82680e8fddd400c803ec5
-
Size
95KB
-
MD5
e1abb7c793a5fa266313e7d66491149d
-
SHA1
b72e4634074bf6fb54048b9ca74783a212ad76ab
-
SHA256
c7d7a2cad0c18406bd0370727549b00ad27c041526e82680e8fddd400c803ec5
-
SHA512
f3f2ef2afa88f6a012ae4f06480e3ac71a4d155727f8ab92d6a023a9318e862d967877794511d8d1697f82dd0638a186da7f526765296cdb14c03cda97df30d0
-
SSDEEP
1536:yvTe2DLk/n+mDr8/D5prNnopoLoxT+7wj0r4iS1gb50sPxPV4ivquBZi7:mTDLi+m38/D7NnbL7wg0n60sVV/vqio
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2af994c5d5625be98c89248dca5bce26a40debf6b3c7b3b775a5ae916427a18b.exe
Files
-
c7d7a2cad0c18406bd0370727549b00ad27c041526e82680e8fddd400c803ec5.zip
Password: infected
-
2af994c5d5625be98c89248dca5bce26a40debf6b3c7b3b775a5ae916427a18b.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ