Static task
static1
Behavioral task
behavioral1
Sample
afb3c2222365641951a91bb0a55a1cdd2774539475a79c0deb8fa6bbd3d56f53.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
afb3c2222365641951a91bb0a55a1cdd2774539475a79c0deb8fa6bbd3d56f53.exe
Resource
win10v2004-20240508-en
General
-
Target
aa0d227be750218423e3f2c8c8e3b7b07afc05054209c5cdcd46165dfe568081
-
Size
1.6MB
-
MD5
5d0e6b7970529d64470e4a6b03d00450
-
SHA1
22771a07b22f0781ee48f11a83e87991dccd1920
-
SHA256
aa0d227be750218423e3f2c8c8e3b7b07afc05054209c5cdcd46165dfe568081
-
SHA512
a09a6ee5addc23922cf2a03a60466555c3103c540ec77ee91d7229f707ff019e1f1c50b00169e392bc2d2e6c11acf85a2494e7a9b47af0b958deb9c43dcfe583
-
SSDEEP
49152:UZQari1L5NgiFRDmJu0ghloi9ar3D9GvD:UtrS3rDD0gzoi8gr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/afb3c2222365641951a91bb0a55a1cdd2774539475a79c0deb8fa6bbd3d56f53.exe
Files
-
aa0d227be750218423e3f2c8c8e3b7b07afc05054209c5cdcd46165dfe568081.zip
Password: infected
-
afb3c2222365641951a91bb0a55a1cdd2774539475a79c0deb8fa6bbd3d56f53.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ