Static task
static1
Behavioral task
behavioral1
Sample
9dad6e1350810eaee247d225c134a39441f286907c861fd6c825656cc9224613.exe
Resource
win7-20240221-en
General
-
Target
240f134e5318c9efc8f4edb219a9b16f.bin
-
Size
514KB
-
MD5
39343e0d8196e8d145083f601f837a4f
-
SHA1
eb7bb4bf56aedeb8bb81ecd23281884079bd661e
-
SHA256
5351cb6ffb66980a5394108f573c922f97dea26f1572d1bff864d979df88b264
-
SHA512
aba399e72f50349b6a34b9dc9c82a6701d890a36d6c03555236536ba51296b80a858dff079f1cb1176fc192f625b69edef9a724216d1c82a0f72b130edf3cfb1
-
SSDEEP
12288:uAP2hgyzQf8eg8KAH7V6HZUfXzH43vGOxfOai0yUvW31i2p1G:/2hJ5fAiUz43eOlTiUMikY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/9dad6e1350810eaee247d225c134a39441f286907c861fd6c825656cc9224613.exe
Files
-
240f134e5318c9efc8f4edb219a9b16f.bin.zip
Password: infected
-
9dad6e1350810eaee247d225c134a39441f286907c861fd6c825656cc9224613.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 814KB - Virtual size: 814KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ