Static task
static1
Behavioral task
behavioral1
Sample
94e42c4fee044a71b982054b06a77bc335aaf1e542f66422a75de3ea207dd77a.exe
Resource
win7-20240221-en
General
-
Target
776e97dad3071bc1fd1ac1365cf8c743.bin
-
Size
3.3MB
-
MD5
f4d8b7c51bc6833000bc281d7b1c4203
-
SHA1
5753e6659cf8074082352bcd92309800893b1e88
-
SHA256
4a14203cc7d3222f209678dddcd1a727e0fe137c0e7ad27aca365b3f415d5f0d
-
SHA512
23192241e06ea5afc4458f7ad3ba1a006187adeca8debd3f31551022d18be6e2f0087d8247f22345fc19a3736c443976f5977b869d3f7ab3b02520c63c340cbb
-
SSDEEP
98304:u6NinEM9j3Ad1IG9OD+ShIseF3i+HUKpG:u77je14DeM+HW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/94e42c4fee044a71b982054b06a77bc335aaf1e542f66422a75de3ea207dd77a.exe
Files
-
776e97dad3071bc1fd1ac1365cf8c743.bin.zip
Password: infected
-
94e42c4fee044a71b982054b06a77bc335aaf1e542f66422a75de3ea207dd77a.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ