Static task
static1
Behavioral task
behavioral1
Sample
888fc25420157ea24e1c2eb4d34f5b671acce00d1d66a6218c0d5d508d377c19.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
888fc25420157ea24e1c2eb4d34f5b671acce00d1d66a6218c0d5d508d377c19.exe
Resource
win10v2004-20240226-en
General
-
Target
0355cc404461cecc1e67f289eac9998d.bin
-
Size
69KB
-
MD5
47a696c29661da18032f1c6f3f6e26cc
-
SHA1
6931b9a4dba557349779455829333b7ac28fe103
-
SHA256
15504ade6a2cb6beba702df36b91fbfcc7c8ce9fce22e0e86cd05ab73221895b
-
SHA512
f773826510e85fb943f1aa9707f9b5ccb623adbe5abaf113e90f92625131f8240dcf07f7704be5efd2e77efd42d5cb4d2f38636a7ddc74f76c938ca4d9b7d8e2
-
SSDEEP
1536:kG+CGyLScdUYE4xGVLEu2c84Ke7FplOUE7kGYyDOOBIMKFaN2:kG+lyLSoKQOFE7kB+hBIMhU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/888fc25420157ea24e1c2eb4d34f5b671acce00d1d66a6218c0d5d508d377c19.exe
Files
-
0355cc404461cecc1e67f289eac9998d.bin.zip
Password: infected
-
888fc25420157ea24e1c2eb4d34f5b671acce00d1d66a6218c0d5d508d377c19.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ