Static task
static1
Behavioral task
behavioral1
Sample
b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe
Resource
win7-20240221-en
General
-
Target
b56b5aa6bb2605d69d90e07113c4624f42642bc5081ebe0adefb4486063f12be
-
Size
12KB
-
MD5
55c7280546e2b8d27745862d8057d549
-
SHA1
84f937608faa2b0679b85614d436f1e02c8c4dfa
-
SHA256
b56b5aa6bb2605d69d90e07113c4624f42642bc5081ebe0adefb4486063f12be
-
SHA512
0092e3b353e79338b3828c65219344b93504ce8dc4a83b7b391ec4e32849907d73e352ad633dd390cf2156e7fa798b46ac5640d0e4070c77d5462e19dbb5b0bc
-
SSDEEP
192:EWsYFYRhsC833mi1D600vEmqjV8C6Qx8/QsU0L7qnMGMpMXa/LZI8hP2TDZZopAw:FO+nNJvm+GtYsU0RpUa/Li8UTDZ+miB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe
Files
-
b56b5aa6bb2605d69d90e07113c4624f42642bc5081ebe0adefb4486063f12be.zip
Password: infected
-
b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ