Static task
static1
Behavioral task
behavioral1
Sample
1996f2205d2a2559062160e8644de53d674cb75022df172d66e06297a0ca03a8.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1996f2205d2a2559062160e8644de53d674cb75022df172d66e06297a0ca03a8.exe
Resource
win10v2004-20240508-en
General
-
Target
78adbb539f8a55037eb5d912c4581ffa.bin
-
Size
689KB
-
MD5
da2105d9cc5d61ca2ce1afdae6296cd8
-
SHA1
2c9aaee9304ed0036c5d6c7a0aed2508157dffed
-
SHA256
29695b1e2d521723d0d30d56041e0f44d28918bf6bb626fa4928cc97577c1749
-
SHA512
8d7b045e1e97bc2b0345883392a08bf917b18dfcaeadb674e47805a3775eedd9a306b2afa207386c877243d37058215532c6004b03f333fdef11fda571f92389
-
SSDEEP
12288:WJsSCVM5sVY7QlJFZi6CYUd8Ipt2cU4W9YNs7ertj/o7c7x3116Yk3p/:WSWywQhZix9t2B4WIvrtboYt311tk3d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/1996f2205d2a2559062160e8644de53d674cb75022df172d66e06297a0ca03a8.exe
Files
-
78adbb539f8a55037eb5d912c4581ffa.bin.zip
Password: infected
-
1996f2205d2a2559062160e8644de53d674cb75022df172d66e06297a0ca03a8.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 739KB - Virtual size: 738KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ