Static task
static1
Behavioral task
behavioral1
Sample
772b9e54aa1f5ffaf8bb4514a57820fcee2b73abbe79c6e0068bdd6c3ac4cab0.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
772b9e54aa1f5ffaf8bb4514a57820fcee2b73abbe79c6e0068bdd6c3ac4cab0.exe
Resource
win10v2004-20240226-en
General
-
Target
e3e214ce7d3c8a8c539978f705363441.bin
-
Size
715KB
-
MD5
98a010deab932d228d27dbbda236f8d2
-
SHA1
39df40944cdbb48adc2156631fbb723c53abc997
-
SHA256
7f3ea2408dcb280dfc53ee783df5529bff7f6893dd169f75e07a3aecb4662246
-
SHA512
2c6f620994dcf7d9958d45bad05f08d6202ad9ab83b329bf61d1cb49e3898f4fae64abb716a6bb52c799db6329543ff1e31d38e5661627985cf9076c1681ebd7
-
SSDEEP
12288:ZV2oP1qWdQu4evZERMQKMk/9eJRVRWf7qdFSBanzu6qDiDRkDTWvdI6Fg2JA:aucQn7Qzk/9ebzyq/nzkIR+Sv2wgmA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/772b9e54aa1f5ffaf8bb4514a57820fcee2b73abbe79c6e0068bdd6c3ac4cab0.exe
Files
-
e3e214ce7d3c8a8c539978f705363441.bin.zip
Password: infected
-
772b9e54aa1f5ffaf8bb4514a57820fcee2b73abbe79c6e0068bdd6c3ac4cab0.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 734KB - Virtual size: 732KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ