Static task
static1
Behavioral task
behavioral1
Sample
6a220dfe065da94494e1f5a94311bdba17f6f56d66f40ca39af817798fea09af.exe
Resource
win7-20240215-en
General
-
Target
7416647e8ad9b50cc3a8da41679abefc154798e0536587c9795bde7f9ea90591
-
Size
591KB
-
MD5
9b2305438c4e666ab49b17b4b5babf02
-
SHA1
27a838819c2b767cec2a7469b729a58c857ae4df
-
SHA256
7416647e8ad9b50cc3a8da41679abefc154798e0536587c9795bde7f9ea90591
-
SHA512
4d7c225b19c660d5e2220acef721ea922763f9b2793373eba7f584245d8b5115a4039e93ecf1acf983b6a5a98bb03e0407a102d139289af6830312a6f7429636
-
SSDEEP
12288:aMAJovD3qFoPn4sOqX/wEyuTeJ7VTveJSo9+fZoj8V5uv:aMBLaQdOayuTMcJSyWuv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/6a220dfe065da94494e1f5a94311bdba17f6f56d66f40ca39af817798fea09af.exe
Files
-
7416647e8ad9b50cc3a8da41679abefc154798e0536587c9795bde7f9ea90591.zip
Password: infected
-
6a220dfe065da94494e1f5a94311bdba17f6f56d66f40ca39af817798fea09af.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 761KB - Virtual size: 761KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 816B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ