Static task
static1
Behavioral task
behavioral1
Sample
20cf4c65d87c78a7f04664974de125697792c6381d028ae32ec275294edae5cf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
20cf4c65d87c78a7f04664974de125697792c6381d028ae32ec275294edae5cf.exe
Resource
win10v2004-20240412-en
General
-
Target
62c98b45360768998606301aa4ae903798a7eb6acbd89f3fce22870a32eeb843
-
Size
574KB
-
MD5
364c19a66a4a319425e0ca0575d6552a
-
SHA1
832bb480a998ce495fe957cccf15ae547e95bdae
-
SHA256
62c98b45360768998606301aa4ae903798a7eb6acbd89f3fce22870a32eeb843
-
SHA512
a54ac9f95d34f10827d8ee7fd1e3ca5e89035030b4e8bd953193ded01d5fe80654c10518956334813969d05ca6588d0919236ab673e4e1d8157eb636c601047d
-
SSDEEP
12288:zMMsAlpmeoEGEvvJsAnosYUgHGN+Qd6S7KISudt4B2Urw9H:zMMs+TOE3JsiL0S+/SSuvi2UrKH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/20cf4c65d87c78a7f04664974de125697792c6381d028ae32ec275294edae5cf.exe
Files
-
62c98b45360768998606301aa4ae903798a7eb6acbd89f3fce22870a32eeb843.zip
Password: infected
-
20cf4c65d87c78a7f04664974de125697792c6381d028ae32ec275294edae5cf.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 833KB - Virtual size: 832KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ