Static task
static1
Behavioral task
behavioral1
Sample
b3b1a41903116bbc9fedd6403c9ad1976eefdcd50c322859f993a822b3bbac08.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b3b1a41903116bbc9fedd6403c9ad1976eefdcd50c322859f993a822b3bbac08.exe
Resource
win10v2004-20240226-en
General
-
Target
74612d59e628594289ac484c3dd2f533313bbcf40f751645b4fcbd52b381e80f
-
Size
25KB
-
MD5
71f7c0f32c43a2595a2a7f73c38b5e8c
-
SHA1
081b0c0122fc8a8d1497b9568a3852fbe56b9414
-
SHA256
74612d59e628594289ac484c3dd2f533313bbcf40f751645b4fcbd52b381e80f
-
SHA512
f7ff475bfc10c20fc845928e2207565d0d2a6ae8af63341c966ce99a5046b828af4c4fbffefac0c57b4bfc7c4c00e9f5abb6bba3c7105bbce874fb70fd070464
-
SSDEEP
384:pm/zpUNiH4EWwQjFWqHRbOxKVH8YjjhCtFlI80WcB2qf8fFKGMdhOWZfYIdPB4:pEugbIYKRbbZRCblI8pW8ffQm0+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b3b1a41903116bbc9fedd6403c9ad1976eefdcd50c322859f993a822b3bbac08.exe
Files
-
74612d59e628594289ac484c3dd2f533313bbcf40f751645b4fcbd52b381e80f.zip
Password: infected
-
b3b1a41903116bbc9fedd6403c9ad1976eefdcd50c322859f993a822b3bbac08.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ