Static task
static1
Behavioral task
behavioral1
Sample
7ceeccc9ac21edf08e890d984d4755d093253dad8f45b42c9989983101aea498.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7ceeccc9ac21edf08e890d984d4755d093253dad8f45b42c9989983101aea498.exe
Resource
win10v2004-20240419-en
General
-
Target
260d4fd1fd35318223e403e6496f9bc2.bin
-
Size
266KB
-
MD5
05ce1d2e39ae346ba7162905a2bf5e6e
-
SHA1
ca4d7c90153b4eb2b4be31f1e8b0b6f66007141f
-
SHA256
b08fa806a14be08ebce4db28d5de6ea4ace7fd7be8be4c8e11d7e3b2e9d0e326
-
SHA512
272739bcb28d620c47bf7db478103567d0d135455b96c086a17e575c3f89da1aca9752396249d22ba47616f43cd6baf787349a8244b6cba6f442391deadfcc42
-
SSDEEP
6144:CWMqXQSyedMM7aCoqX/avv+i45pERYoVfI/cXJHaEDSVpOSA1QGrDvE8:LHdX+9qX1nQjXJxDSDOh1QGr3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/7ceeccc9ac21edf08e890d984d4755d093253dad8f45b42c9989983101aea498.exe
Files
-
260d4fd1fd35318223e403e6496f9bc2.bin.zip
Password: infected
-
7ceeccc9ac21edf08e890d984d4755d093253dad8f45b42c9989983101aea498.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 341KB - Virtual size: 340KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ