Static task
static1
Behavioral task
behavioral1
Sample
2de5faa16c405e6a3bc14b9d31a82cc389290066b36ed8f0d99d7cd53b1b1d1d.exe
Resource
win7-20240221-en
General
-
Target
ff1b064b71fa0f332b1efd96784d4c4412da9848c0fcb7f6f9e78a914a70daae
-
Size
531KB
-
MD5
4d12e30e2a09a62999e6863c94d66e8d
-
SHA1
4b625deeb887c6d8c2116668e6e6ded7066d0bb6
-
SHA256
ff1b064b71fa0f332b1efd96784d4c4412da9848c0fcb7f6f9e78a914a70daae
-
SHA512
55f6d20e00015575a7078a87a45eada3b572a9a167567d0f632aef0b6802cb1b55aea9fcf8c1a431957272f2e70ab3d72869d2b5acba9f6a99864d49bbeae46d
-
SSDEEP
12288:em18e1TdoWWKIooyLm4WfZlUqYnB0ab73DXzkLFQxib:eTeL6HyLfWfZKnDML4Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2de5faa16c405e6a3bc14b9d31a82cc389290066b36ed8f0d99d7cd53b1b1d1d.exe
Files
-
ff1b064b71fa0f332b1efd96784d4c4412da9848c0fcb7f6f9e78a914a70daae.zip
Password: infected
-
2de5faa16c405e6a3bc14b9d31a82cc389290066b36ed8f0d99d7cd53b1b1d1d.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 489KB - Virtual size: 489KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ