Static task
static1
Behavioral task
behavioral1
Sample
d93058ce47215773bfed7fc6a36c4991a4d3278ce71cfd6ec23d0c3b74566798.exe
Resource
win7-20231129-en
General
-
Target
b029c4194a0b8042d002922a1d2679da5a3d560629e890078a104ca0d461bf5b
-
Size
595KB
-
MD5
bb041a29add831b0f3e1f978a9127b6f
-
SHA1
66ee5d797a5b502f3d747e40c7db2552a4897f8b
-
SHA256
b029c4194a0b8042d002922a1d2679da5a3d560629e890078a104ca0d461bf5b
-
SHA512
b077f01fbf342de31550b2f4bbc2fb284400d5a5826ae991d9b7b514913b0601c31653fb5d9010411bdc0aae48ad28b2b445906447f7363bec62ecfdf62f9f52
-
SSDEEP
12288:YOZEJElzXQmSsRAVElD0liAkSiWsK9H5TivvRLbssXaRc9:YOZDtQmf+A4iNWrTsWG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d93058ce47215773bfed7fc6a36c4991a4d3278ce71cfd6ec23d0c3b74566798.exe
Files
-
b029c4194a0b8042d002922a1d2679da5a3d560629e890078a104ca0d461bf5b.zip
Password: infected
-
d93058ce47215773bfed7fc6a36c4991a4d3278ce71cfd6ec23d0c3b74566798.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 645KB - Virtual size: 645KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ