Static task
static1
Behavioral task
behavioral1
Sample
abc8131003a1ec8b9a4a6e9a477392d7fef6b866bbdafdcc08d94b7b760e3a2d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
abc8131003a1ec8b9a4a6e9a477392d7fef6b866bbdafdcc08d94b7b760e3a2d.exe
Resource
win10v2004-20240412-en
General
-
Target
5f31ad79d8729b1199c967d70f5ee99b7ac47c480bfe58c782baced4bb2450f6
-
Size
466KB
-
MD5
faca3127e4bc9d560bcb37471c2447f5
-
SHA1
3f0e8b30103dd2912a27604a2aa9a4f5fa9e7245
-
SHA256
5f31ad79d8729b1199c967d70f5ee99b7ac47c480bfe58c782baced4bb2450f6
-
SHA512
eebbcae126ee643f0700d11a14ff2908f416387552d298210715f6acde2a2434e5eaef36d5d8609ff2e8a4ff9cf5ae38da677631366586bef9de93e4520c98f8
-
SSDEEP
12288:AlyLyjTJJWQpN2FYN0eIfcQ49xIkJFqhX:AoLinWlSOeIQbHqt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/abc8131003a1ec8b9a4a6e9a477392d7fef6b866bbdafdcc08d94b7b760e3a2d.exe
Files
-
5f31ad79d8729b1199c967d70f5ee99b7ac47c480bfe58c782baced4bb2450f6.zip
Password: infected
-
abc8131003a1ec8b9a4a6e9a477392d7fef6b866bbdafdcc08d94b7b760e3a2d.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 535KB - Virtual size: 534KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ