Static task
static1
Behavioral task
behavioral1
Sample
7e969ec78579e242e08ff49e7e7b8818fcc8e5925f922f4171d6e244a25754a8.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
7e969ec78579e242e08ff49e7e7b8818fcc8e5925f922f4171d6e244a25754a8.exe
Resource
win10v2004-20240508-en
General
-
Target
c55d43bcf10a33e2e3db4bce5bbe7084.bin
-
Size
514KB
-
MD5
d5bac2c0c02cb29819f207f4767fa8d8
-
SHA1
5d4c522029bb388a02e0930a605dc66713d2f66d
-
SHA256
fc940d1645b2e99c8380685d7354fbae371de0ab6133ec093e7feadeeff40473
-
SHA512
c383f4c90bec224367bb2e44ded961c6b2c906fa541885228793e180d4c9e688507fa3dcc946490b31e552614fcc822ede5d2de6f082b110e09f5c2a45be39b5
-
SSDEEP
12288:6Tu7AQPdtyERjf0EUlsDjEQzfeQ31xFjRM93MPJFMIC:6T0GEBglwP3hRM9cDzC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/7e969ec78579e242e08ff49e7e7b8818fcc8e5925f922f4171d6e244a25754a8.exe
Files
-
c55d43bcf10a33e2e3db4bce5bbe7084.bin.zip
Password: infected
-
7e969ec78579e242e08ff49e7e7b8818fcc8e5925f922f4171d6e244a25754a8.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 914KB - Virtual size: 913KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ