Static task
static1
Behavioral task
behavioral1
Sample
16043cbb08a362ab425145ded9447bcc382c2b9c9eb3b570704edabbe4276fea.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
16043cbb08a362ab425145ded9447bcc382c2b9c9eb3b570704edabbe4276fea.exe
Resource
win10v2004-20240412-en
General
-
Target
93f87d1e11c67dbc47ff98369811e826.bin
-
Size
420KB
-
MD5
c05c40c0a5ed770b01f0bc19eca78ce6
-
SHA1
cb9cfde4b7aada25a9b83e116b629645ec997dbf
-
SHA256
0e3808ee724ff6c2b6b036e9175e588360a1605e044895c6ce4b8f3aa79b2e26
-
SHA512
ecfd9d437480714b35612fec47830bb10d5bdc3a4c7a62a3e5ea52a529f5429608ed0d2a465d4616cd5b8f94c9ba635819192e441c52bc3aeb9d4e75fefa0de9
-
SSDEEP
6144:z7qnECPZXZi9hjnz3RkXl9DWf7fwHWaGxlRs/2vs7BjVsSG3F7tCLTahVgk+rLHq:3qnEsECVwNjRs/+6b8F/hrULH5c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/16043cbb08a362ab425145ded9447bcc382c2b9c9eb3b570704edabbe4276fea.exe
Files
-
93f87d1e11c67dbc47ff98369811e826.bin.zip
Password: infected
-
16043cbb08a362ab425145ded9447bcc382c2b9c9eb3b570704edabbe4276fea.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 346KB - Virtual size: 346KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 217KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ