Static task
static1
Behavioral task
behavioral1
Sample
Order No Q240419617006.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
Order No Q240419617006.exe
Resource
win10v2004-20240426-en
General
-
Target
3b5bd164d96b77cff272f3dc658f6d9b.bin
-
Size
626KB
-
MD5
7ad4ba4ac76a5c5b0c380606f77180c2
-
SHA1
ac097d490480249d1b281fa0268329fc26dd4f68
-
SHA256
7eb0cfc1e0e926963c0d6ef6280f6062edf64dd412ff9eb5dfb860ff395be296
-
SHA512
a53c26417265d72cc2ad175bcca7795247b32d3a0f909e8250727e273d097d7ffdda6c6f3c2f78b60752c9a5f9a8701ae6ec47feb8da6fa264c6016fd12ee26e
-
SSDEEP
12288:Rhuw63imJTn9FssAu0iXAgYCncABYAKvwUGVJpbRZPtyi8:RXsVJfs1gnPjdbxRj8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Order No Q240419617006.exe
Files
-
3b5bd164d96b77cff272f3dc658f6d9b.bin.zip
Password: infected
-
e662d63d8530d5a95952d0ec96be03a7b1c9d3e9f3b40c2c2b5c0b3163052878.rar.rar
Password: infected
-
Order No Q240419617006.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 672KB - Virtual size: 670KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ