Static task
static1
Behavioral task
behavioral1
Sample
f109e5691b8fedddeec53b85ced5c60cb3010b6219964b7f0262c5ebfd191242.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
f109e5691b8fedddeec53b85ced5c60cb3010b6219964b7f0262c5ebfd191242.exe
Resource
win10v2004-20240508-en
General
-
Target
0ae7a23f436493dc75ede2b3c2607f65.bin
-
Size
227KB
-
MD5
4b854ee569628fab6a30f8de46ccf551
-
SHA1
4bb9e364fc13c8b95ff92e14e2edcc0c612cbd4b
-
SHA256
8d9b297a7a98de69605813135d6de0bd55cfc3d3b3b09c2f5a79943e935f363b
-
SHA512
f1f3baeba81e79ac294ab28e8d7bbdbfd5b4540bb88f44a376fa8581db4750efcec29545e1e145d73f37d8a36f5b2dd7cd13621b8f6703118c439d5e88cbf6dc
-
SSDEEP
6144:p6Ve6IxcF+Lu6H6xulry1/dmZnJOzMUXHskfsFk0x:NHaWumkPm5oLXvQx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/f109e5691b8fedddeec53b85ced5c60cb3010b6219964b7f0262c5ebfd191242.exe
Files
-
0ae7a23f436493dc75ede2b3c2607f65.bin.zip
Password: infected
-
f109e5691b8fedddeec53b85ced5c60cb3010b6219964b7f0262c5ebfd191242.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 565KB - Virtual size: 564KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ