Static task
static1
Behavioral task
behavioral1
Sample
ac494597c0a472d234bb689f28f9dfb65383048cc275fc7b3249bd0b77c8a896.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ac494597c0a472d234bb689f28f9dfb65383048cc275fc7b3249bd0b77c8a896.exe
Resource
win10v2004-20240226-en
General
-
Target
2d5407940284ab960945919db2d3f5c492ebd47f1ae2b00946f27c1a41cbc809
-
Size
623KB
-
MD5
fcd9cb0d61271f18a30168da66d54957
-
SHA1
050c4e72548593de5d36ad06645009e9654b249f
-
SHA256
2d5407940284ab960945919db2d3f5c492ebd47f1ae2b00946f27c1a41cbc809
-
SHA512
fe69b214b76eecd1700f5fae253e6b9320a15ade3b381c9b58f6bfb28b5ab0d470f89b13d54e267375cd3d27ff01375b8329cb3ec08bc23bb824ed1c109465a6
-
SSDEEP
12288:00YX7+p5zFiTT6Iy+Z8dDfPtM/+M5JbeAa6BHXlzB/Jm1KUuslF:DlxiPpy+udDfPqheAa6B3ltSKUuaF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ac494597c0a472d234bb689f28f9dfb65383048cc275fc7b3249bd0b77c8a896.exe
Files
-
2d5407940284ab960945919db2d3f5c492ebd47f1ae2b00946f27c1a41cbc809.zip
Password: infected
-
ac494597c0a472d234bb689f28f9dfb65383048cc275fc7b3249bd0b77c8a896.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 650KB - Virtual size: 650KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ