Static task
static1
Behavioral task
behavioral1
Sample
b1347714d02fd4e8d61bb36d2559ecfc692417fd743df8a59d961fe42c6b1ac7.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
b1347714d02fd4e8d61bb36d2559ecfc692417fd743df8a59d961fe42c6b1ac7.exe
Resource
win10v2004-20240508-en
General
-
Target
6b8699718f72b9ab820a060e616955d0.bin
-
Size
740KB
-
MD5
fb9caca0756a63d75c274989ae5c3597
-
SHA1
eeb4300b5fd9d0ac3b3c433cb4c94ac1e27b1e6c
-
SHA256
4a4ea86aecf0d25c3714ebb60fd791933bbb28471a8fd717c0c61ccf61e92be9
-
SHA512
c91c79cfacc6a54ab07425a51c452ada848b89d25538e9dced2ed22882db093d6dcc450d9c446395245dae3600fb020f9c92882707d150534be1a3ccd29c7351
-
SSDEEP
12288:I0OtD7pxNqC3Jb9tn2jR7906dqLWDg9mpIUVzeNX3BDhrcujOjgbPpNTNo9sH3:2tDtquJfnqR7a6It9mpIgSt3JBcbjgl7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b1347714d02fd4e8d61bb36d2559ecfc692417fd743df8a59d961fe42c6b1ac7.exe
Files
-
6b8699718f72b9ab820a060e616955d0.bin.zip
Password: infected
-
b1347714d02fd4e8d61bb36d2559ecfc692417fd743df8a59d961fe42c6b1ac7.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 883KB - Virtual size: 882KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 892B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ