Static task
static1
Behavioral task
behavioral1
Sample
a4ea9049487be50f0c289557af2913d5d4202e3dbeda1355d03dc65561085407.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a4ea9049487be50f0c289557af2913d5d4202e3dbeda1355d03dc65561085407.exe
Resource
win10v2004-20240508-en
General
-
Target
745ddafbe88e9222832618288e202d5f.bin
-
Size
310KB
-
MD5
a3beced2ad86a8337297265bd6ffd4bc
-
SHA1
5599644d6d105c17afd700967c3c0b1185f1ae85
-
SHA256
b900f5871917359d437ec309c121addc2fa4ba68c3d0cd4098d3bd5eb5b59000
-
SHA512
f1fe6ed73087a43cb88b23a9dacd50f5745d479bf7bd565b374e60af61edfb91319a7c5e49fdaec0cf6c74f5068a00160ad2e3e190c05370412abfe737eb2f1a
-
SSDEEP
6144:GG3qI2cR9DDiuWXK1Z28NCqHEG46K5VhBBb9XDD4Z:GcDuuWAZH8qkGDu7nb9Xf+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a4ea9049487be50f0c289557af2913d5d4202e3dbeda1355d03dc65561085407.exe
Files
-
745ddafbe88e9222832618288e202d5f.bin.zip
Password: infected
-
a4ea9049487be50f0c289557af2913d5d4202e3dbeda1355d03dc65561085407.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 534KB - Virtual size: 534KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ