Static task
static1
Behavioral task
behavioral1
Sample
P54422.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
P54422.exe
Resource
win10v2004-20240426-en
General
-
Target
5532cf717c65db02b6fa98a39795b7f5.bin
-
Size
687KB
-
MD5
a015c4852ff7ace93628a845b584913d
-
SHA1
d7d3a201f20942bec0da7d0b3422bc65c67ba184
-
SHA256
3cd0870711dc6cc389bf9ea72204b2a437be2661ad9f8116b503b35a720238f4
-
SHA512
e899ae7eb32a963a735639ac80167a1b4e1e49c76fca1eeddb4345afc841d3883e8d31b4c692d324dc4416c4d3244c4e7bfc0eb0bd38fe2f7118d8f61da13144
-
SSDEEP
12288:AtwEQHIvwdaK1Kbb99YWuVvAfpj4G6OCfXlIUaqPVaztZPnPOx+LB6:u6+2a6Qb9KWFfHKlIata5ZPnWUN6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/P54422.exe
Files
-
5532cf717c65db02b6fa98a39795b7f5.bin.zip
Password: infected
-
de64aa2e7c294b769b6af8395d5461512d3e39ff50039817dd48921162e9f1c5.zip.zip
Password: infected
-
P54422.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 739KB - Virtual size: 738KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ