Static task
static1
Behavioral task
behavioral1
Sample
708ee4218d5907976919dff1722a69fe187648dcf3503a1544d822871a91fad2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
708ee4218d5907976919dff1722a69fe187648dcf3503a1544d822871a91fad2.exe
Resource
win10v2004-20240412-en
General
-
Target
abc34aec9a45b5f5da9b10738ea2f5efcd7a15c30c02ba68e5f19b101b552158
-
Size
571KB
-
MD5
087087b333dd1626c8cbca671b85c17b
-
SHA1
12f204f751335f893cf20a9df9fc806a36095eb3
-
SHA256
abc34aec9a45b5f5da9b10738ea2f5efcd7a15c30c02ba68e5f19b101b552158
-
SHA512
0ea87c55d2315b6b26ce2d352b1fc89130d7ac5b47c5f5600c35ec3217fd5b67b5e7ba1d35f444d5d7d46c98d912f154e4ff4f70f0f9056dce3c2058a34f1f25
-
SSDEEP
12288:KKo3v3VRuCVTpr3VmwbUpCsJ/hihyhRgLP48FJ99gAb1OtuTeU:Knf3KYTpr3VmwY9hi8haTFJ9lstuv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/708ee4218d5907976919dff1722a69fe187648dcf3503a1544d822871a91fad2.exe
Files
-
abc34aec9a45b5f5da9b10738ea2f5efcd7a15c30c02ba68e5f19b101b552158.zip
Password: infected
-
708ee4218d5907976919dff1722a69fe187648dcf3503a1544d822871a91fad2.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 853KB - Virtual size: 853KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ