Static task
static1
Behavioral task
behavioral1
Sample
512eae984c0fd479fdcd2f73253fc52adeed18d104dff390b5b9563b3ca8dff5.exe
Resource
win7-20240215-en
General
-
Target
08e2246fa2d8e30547f8c42acb82c305.bin
-
Size
3.0MB
-
MD5
e4ca41366970274e1ab0b00d2dfffe0f
-
SHA1
50f7c6568f4f02e60420f24d1d058c51f533f5a5
-
SHA256
dbfc1028988c9a22df0e7cc6c1b353f7b491d8168076a036d66ab4c95c73424b
-
SHA512
af6bdfbebb19a5e3b98777bd5b1bca987f4c80983f3a339dcd061dd3d65dbe8055ed502446366368a17931c634fba8b2e58e6b7a1f8139ed498f72893584d250
-
SSDEEP
49152:iSn3vaSvkmfWmS3aGYMYysFCDfhVw2LmLNYAIpr7zXL58L3aRBEdB2xu8HLtEwTE:5DUYtyTDfhVZiLJIt3t8sudZ2HTrYmd4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/512eae984c0fd479fdcd2f73253fc52adeed18d104dff390b5b9563b3ca8dff5.exe
Files
-
08e2246fa2d8e30547f8c42acb82c305.bin.zip
Password: infected
-
512eae984c0fd479fdcd2f73253fc52adeed18d104dff390b5b9563b3ca8dff5.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ