Static task
static1
Behavioral task
behavioral1
Sample
a73bde5818cf35b57af18ef482d69a39cf93ab332eb5a1301042c9b69e74dcc9.exe
Resource
win7-20231129-en
General
-
Target
74a24918d2d23cf37ea8d542136187fdcd15aaf97792a36da44c01dd0d20555e
-
Size
636KB
-
MD5
8028f08408efe10f4c09a69d30d321ae
-
SHA1
efd04813d698225c42f917ec47d7392c46575a08
-
SHA256
74a24918d2d23cf37ea8d542136187fdcd15aaf97792a36da44c01dd0d20555e
-
SHA512
8338e3ffca188cbba0cebf9e962411a98a53a01a11481888697ecc091057263c118671ae2f955fbcb1beddc753003c7c0028c2aa2018e358006b67b0d3505e7f
-
SSDEEP
6144:rxwhnR5/oeD4doneNrPrOvnnjx0iqDEl8gjgsZwyMkGJaYqSMOk/UqGoLCbby5ec:rxwpCJet5STiIk/au5KjwDnKz46vur
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a73bde5818cf35b57af18ef482d69a39cf93ab332eb5a1301042c9b69e74dcc9.exe
Files
-
74a24918d2d23cf37ea8d542136187fdcd15aaf97792a36da44c01dd0d20555e.zip
Password: infected
-
a73bde5818cf35b57af18ef482d69a39cf93ab332eb5a1301042c9b69e74dcc9.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 659KB - Virtual size: 658KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ