Static task
static1
Behavioral task
behavioral1
Sample
ddd48bf86fb56853f8d7ec54bdd9922044f4f6a97aa16c4b1b6da4d162c63f50.exe
Resource
win7-20240221-en
General
-
Target
ed89aeb1400ea4790b2a62200ee44680.bin
-
Size
89KB
-
MD5
1efb79874da710535a39f9a38e50b867
-
SHA1
bde1741f9282b52b0cfc8639955eb70e4f3a939a
-
SHA256
ee881011e31aa50bea062dfba17e99529cbdbbae7099e258f3c7ea95c5d35525
-
SHA512
fcc4e0cdb19514f788de3d1cc3f8d7cf092c29310bc4407753da8f3801024f8a95d94f4c0fc1596e2301c61e7baf381f7d48f8852d7a4f7adc770e1c021a3212
-
SSDEEP
1536:dtaASkiyZngmJ2GYnzNQPNIg7r0ZM9fheV6NdhjAMGcmlFqOSH05kooraLE:SASmgm2ZzNUNIg76VKdwfWqkGE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ddd48bf86fb56853f8d7ec54bdd9922044f4f6a97aa16c4b1b6da4d162c63f50.exe
Files
-
ed89aeb1400ea4790b2a62200ee44680.bin.zip
Password: infected
-
ddd48bf86fb56853f8d7ec54bdd9922044f4f6a97aa16c4b1b6da4d162c63f50.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 192KB - Virtual size: 191KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ