Static task
static1
Behavioral task
behavioral1
Sample
e50903a2738b0e7b900a545e5bd1c8b4e1441fb58dcab2a1065f87bcb08b1dce.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e50903a2738b0e7b900a545e5bd1c8b4e1441fb58dcab2a1065f87bcb08b1dce.exe
Resource
win10v2004-20240412-en
General
-
Target
f22f1ecee8a71492de735330b5edb2c4d003c1797840d33d02d99919c210fa6d
-
Size
543KB
-
MD5
3d6d01de1aa1a01d59630c8e6ce893b9
-
SHA1
0b47ecd9bbe4ee7be0d8edbf0ac415a949d4d11c
-
SHA256
f22f1ecee8a71492de735330b5edb2c4d003c1797840d33d02d99919c210fa6d
-
SHA512
650bfb2f2a994c5095f581a021c7699d4db62e389495c9a17ed36caf58e1c9330c986ec8196a8f1762afe09b0d8ca64ec81fc95e3c1163c90224fa0b080feed0
-
SSDEEP
12288:27u7QYp6PG0mBX8UgE45qXGZR1K+JtNt5iHOzjiEVhLJxh:AADXX8UgoXE1K+JtNt5COzjiEVTxh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/e50903a2738b0e7b900a545e5bd1c8b4e1441fb58dcab2a1065f87bcb08b1dce.exe
Files
-
f22f1ecee8a71492de735330b5edb2c4d003c1797840d33d02d99919c210fa6d.zip
Password: infected
-
e50903a2738b0e7b900a545e5bd1c8b4e1441fb58dcab2a1065f87bcb08b1dce.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 544KB - Virtual size: 543KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ