Static task
static1
Behavioral task
behavioral1
Sample
Bestellung-Nr.24061189392.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
Bestellung-Nr.24061189392.exe
Resource
win10v2004-20240611-en
General
-
Target
fba970dee911640ec929dc11709ac9649d08565b07efbfe9e372ededd96b433e.img
-
Size
1.4MB
-
MD5
c9110ee0d9307d8b4e3e781d10fb013d
-
SHA1
b33a2732ea1d39c9a187d2b623aa9045822feeae
-
SHA256
fba970dee911640ec929dc11709ac9649d08565b07efbfe9e372ededd96b433e
-
SHA512
654206fe18f807b98bf8ceb6f0eaf8974710a43acdaab7282fbaea4b21d3344b8ee959d3eda8c389717726a9eae596b9821243bb1f86cf64360b86b4d5875136
-
SSDEEP
12288:jHGT9ip/w75fpEWSuMtbWl+E7ZgTqDxNhkHTn7QCeHTISfpxrtD8:ARJSuMgl+JTP7QRJtD8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Bestellung-Nr.24061189392.exe
Files
-
fba970dee911640ec929dc11709ac9649d08565b07efbfe9e372ededd96b433e.img.iso
-
out.iso.iso
-
Bestellung-Nr.24061189392.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 914KB - Virtual size: 914KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ