Static task
static1
Behavioral task
behavioral1
Sample
cb22cebed97d6363239f63cf28816b8a8c06977c6d8625a43a61f0afa8823b26.exe
Resource
win7-20240508-en
General
-
Target
457143901d9ca2f0bc836c1dd1faefe3.bin
-
Size
733KB
-
MD5
840f009d320d2d16bba0c66f2d0e831a
-
SHA1
20109e16cca047d7829f21ce907979fbee6ee13a
-
SHA256
ee7d4244e534803ab573e663323b3f83dd9924955a13d7b8696692ad93d7216b
-
SHA512
7e62ed08fe4c70546fdad8239539b861b374b651083308a669ea3995fd2256266b1c3b550658acba9ce142c76cbe056dcee803947ae5cfa911b40142e7a84793
-
SSDEEP
12288:oNz3nEk+buOTeLAGj5wR6ztUSAo0GeOs/MiaQQYWtCszQz2YMrlMnMy34DrrRxYK:g3nl+6O7uBg/gQb4CCQz2/uMe4DZNcK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/cb22cebed97d6363239f63cf28816b8a8c06977c6d8625a43a61f0afa8823b26.exe
Files
-
457143901d9ca2f0bc836c1dd1faefe3.bin.zip
Password: infected
-
cb22cebed97d6363239f63cf28816b8a8c06977c6d8625a43a61f0afa8823b26.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 746KB - Virtual size: 745KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ