Static task
static1
Behavioral task
behavioral1
Sample
30549ededc9343048de37ae6eedad29b958f4b22c5b250570acebfdfa566a16a.exe
Resource
win7-20240221-en
General
-
Target
3550a54054b24a230912f40ba88e612f.bin
-
Size
431KB
-
MD5
3260286379bafa70d2f0f386bfe6e4ba
-
SHA1
90c160f535772b37d307e6c991c260f29a910152
-
SHA256
d2a10be60035011705b12c00544a805b5eb4778455e64884ce9c2eacd3f26d71
-
SHA512
58b3871416a130ef758f382808c2ac15826a15bf81afc9f38402a7d5f926753b351a18b9a79482a1ed136b5d7f728d8d8b00d628e9b4d438933d715ca1a05af5
-
SSDEEP
6144:rsKBMZVcoNUovSojwku0l9hiPMWuamTuAYKTOPhW3+eUuBFoqGAMqDEbP09Ik4AJ:rHknKojFwkWTQqKTD0Isjb8I3PNCnCOD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/30549ededc9343048de37ae6eedad29b958f4b22c5b250570acebfdfa566a16a.exe
Files
-
3550a54054b24a230912f40ba88e612f.bin.zip
Password: infected
-
30549ededc9343048de37ae6eedad29b958f4b22c5b250570acebfdfa566a16a.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 987KB - Virtual size: 987KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ