Static task
static1
Behavioral task
behavioral1
Sample
TOP20240252.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
TOP20240252.exe
Resource
win10v2004-20240419-en
General
-
Target
6ca3e2a0d20c2394277f3d13904b183b.bin
-
Size
665KB
-
MD5
573afccdb5b4755274fd4bd1a2957704
-
SHA1
b85f3732559bab05f6f86b50aa9b960a17f695f2
-
SHA256
1b486ae6b2765c5dc445c58fa3f5acb8502014ba536083966ce459b6233fa8df
-
SHA512
d445ffe3e34e232788f57873a530cfe7baf3db06fa3c9386c7b54eeae01c615a7ec54c5ea4fdb180f910300fc768a6f5c06519a83c7f9c7c287ce94206f5a871
-
SSDEEP
12288:J6l2NUzeKsQNEWN5XMm4s/I7iOIVW5gvVZBb36wnyBlTvPss6LXvKQ+:J6lbH7FzXM+3OhQj3txs6LXe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack002/TOP20240252.exe
Files
-
6ca3e2a0d20c2394277f3d13904b183b.bin.zip
Password: infected
-
d358c34a708312136db08d38a934c42eecfcbc7f376541dea03925319f9a05ed.zip.zip
Password: infected
-
TOP20240252.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 694KB - Virtual size: 693KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ