Static task
static1
Behavioral task
behavioral1
Sample
26321ed18abb4d44668e157dcb9a123debe3b7477d95055d20e5f5d997bf60d7.exe
Resource
win7-20231129-en
General
-
Target
ec03c8da575fa5ee4745506b340968e6.bin
-
Size
265KB
-
MD5
d3f1968577c0136653300c2549a945cc
-
SHA1
dc9653b454d10e00ab954df1e3ca7aa4c036ab81
-
SHA256
6e9684d4b9c12a050ce73e4da9204e9b3db3cadca1ce03b8b4438dd19d36bd1d
-
SHA512
aa79ed9de7de0d2748d77f64c48a4f8ebfe1bdc3f9a51a8e8e4c047fb7eec1ea67b8e85083159a9852335b1566baec3274865ba4c0e8f12d46fef01dc4929ff4
-
SSDEEP
6144:9BejVcjMkq9hJZtno3ORGGpw4aBgfueyZ6hMhynnNCN/xJPAo9uqpY:beZcjMkqhJZtn0uhaBeydINCN/bN9ppY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/26321ed18abb4d44668e157dcb9a123debe3b7477d95055d20e5f5d997bf60d7.exe
Files
-
ec03c8da575fa5ee4745506b340968e6.bin.zip
Password: infected
-
26321ed18abb4d44668e157dcb9a123debe3b7477d95055d20e5f5d997bf60d7.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 234KB - Virtual size: 233KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ