Static task
static1
Behavioral task
behavioral1
Sample
8c3bbac37c8e67896b64efacff85f249aff70a534c4de8fe0b224e7f4b61cc7a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8c3bbac37c8e67896b64efacff85f249aff70a534c4de8fe0b224e7f4b61cc7a.exe
Resource
win10v2004-20240508-en
General
-
Target
728705310f86c7631569658cd576c431.bin
-
Size
656KB
-
MD5
a73fc95010b59b3c81802e91566493de
-
SHA1
54f94962c3eab9139627590c3d64d230be0f7f75
-
SHA256
ff5da1cdbb7602629dbf856a4e56f7fdb80ccd27b0512e7e8c493dfbc1034fa6
-
SHA512
7f543b76af21551e0ae8164aa13af523223c51c994e02c18c75d5ffdcb54c09ef417a1a81f1d44a722365bbb1c5f4a91eebbdbe2ab25cba47b9f73450a4382be
-
SSDEEP
12288:PY2YG/ZGewxFMQ3tlUC+fMLFfn/wuJh8l+iIx4D421FpJ5oyWQz6n51BCMoh:yG/Yeqz3+UFfgQFxU4gJmdxn51Loh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8c3bbac37c8e67896b64efacff85f249aff70a534c4de8fe0b224e7f4b61cc7a.exe
Files
-
728705310f86c7631569658cd576c431.bin.zip
Password: infected
-
8c3bbac37c8e67896b64efacff85f249aff70a534c4de8fe0b224e7f4b61cc7a.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 664KB - Virtual size: 664KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ