Static task
static1
Behavioral task
behavioral1
Sample
4c91634a53fddb78f1737e66c0c323cdbc8d2e720a14732b8336e449ce062319.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4c91634a53fddb78f1737e66c0c323cdbc8d2e720a14732b8336e449ce062319.exe
Resource
win10v2004-20240412-en
General
-
Target
b37d2a3bd77f5c2c6cbd59c922b77ed7e75b9e162619ecc1893f07a531bd9fad
-
Size
444KB
-
MD5
ff67e53f2955a5ad6fdc24f239925591
-
SHA1
d898c9cfe2ec0fb233c530f4516b9095c80d477b
-
SHA256
b37d2a3bd77f5c2c6cbd59c922b77ed7e75b9e162619ecc1893f07a531bd9fad
-
SHA512
83a83fdc2193c475e5f146c3ac14594a0b886f63f5b8136c0472d3dae448ad4e35e8501431d0f6d8f67b3d20be9eb83d623cf3a5aedfaf213bcdf9c6245f6c07
-
SSDEEP
12288:BY03hFn6KOUNBfBLYVXcsrG+ywndrVlCtTnl:r3hF6TMFeXNGytVk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/4c91634a53fddb78f1737e66c0c323cdbc8d2e720a14732b8336e449ce062319.exe
Files
-
b37d2a3bd77f5c2c6cbd59c922b77ed7e75b9e162619ecc1893f07a531bd9fad.zip
Password: infected
-
4c91634a53fddb78f1737e66c0c323cdbc8d2e720a14732b8336e449ce062319.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 765KB - Virtual size: 764KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ