Static task
static1
Behavioral task
behavioral1
Sample
4313a7c24963d3827ae39e68dcb36e396e69d7bdd572a2e1bc95efa84b497930.exe
Resource
win7-20240220-en
General
-
Target
4aedece8ab58f435f45a8737f3018975.bin
-
Size
639KB
-
MD5
5a6591612675975536be263831ce12e9
-
SHA1
94614ce5df233b97f4b5e4226ec16fb622363d1e
-
SHA256
438e64ac59502c0a189a81f3b184d60b5509b8509f70a81d2fedc46d00583517
-
SHA512
0adbb5cd5f0b110ab2e82618c4cc07f3231d341cc7821dc526b01a69c8092e8767bfca32462a7a88a987da6b142269ebd0a9e9e62b35743dfa7e59f54efbb88d
-
SSDEEP
12288:P/3SKJ/FFAGuy30kl/1B6dmn6q8eRk1OM+KP:P/hraU0kldMd2d8eRkaKP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/4313a7c24963d3827ae39e68dcb36e396e69d7bdd572a2e1bc95efa84b497930.exe
Files
-
4aedece8ab58f435f45a8737f3018975.bin.zip
Password: infected
-
4313a7c24963d3827ae39e68dcb36e396e69d7bdd572a2e1bc95efa84b497930.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 652KB - Virtual size: 650KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ