Static task
static1
Behavioral task
behavioral1
Sample
d399c0e21b4898a4089df84581aeaeae7086167e36865dcb05efd4bc30e3e811.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d399c0e21b4898a4089df84581aeaeae7086167e36865dcb05efd4bc30e3e811.exe
Resource
win10v2004-20240412-en
General
-
Target
bfddfa7c85a4f8d2a3d3b168d9d737f370654ad96cd979b44098cd7f5ec70f84
-
Size
12KB
-
MD5
690352cf062f207ca0a8895d20b22561
-
SHA1
287cfbb12b6991e95262615f19e8bb7c29a141ac
-
SHA256
bfddfa7c85a4f8d2a3d3b168d9d737f370654ad96cd979b44098cd7f5ec70f84
-
SHA512
e6698acc88cd626ae6de82432d7666bf7d6c445e95cf8b375da21f3f25843c5801c12ad4ea91a51bdebf137ae88a5d55e34d3260570c15abfb15f9de33a71e75
-
SSDEEP
384:MptSBc/d0bIZrrenBIBkaEJ6Hoy9Ngil9oeknVD:rSdSu1kQITil9oeknVD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d399c0e21b4898a4089df84581aeaeae7086167e36865dcb05efd4bc30e3e811.exe
Files
-
bfddfa7c85a4f8d2a3d3b168d9d737f370654ad96cd979b44098cd7f5ec70f84.zip
Password: infected
-
d399c0e21b4898a4089df84581aeaeae7086167e36865dcb05efd4bc30e3e811.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ