Static task
static1
Behavioral task
behavioral1
Sample
Message_20240703082651_snippa/Message_20240703082651_snippa.wav.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
Message_20240703082651_snippa/Message_20240703082651_snippa.wav.exe
Resource
win10v2004-20240611-en
General
-
Target
04072024_0303_03072024_Message_20240703082651_snippa.zip
-
Size
2.0MB
-
MD5
d4d9594bc1e7aff27a623c4972620712
-
SHA1
eb8a4ed87a990e2487ebe1fe9fc0a350472c4542
-
SHA256
457f35de1b15d62282ce17e1d53b2df1a6cea43e1f139012bec66cd5bcc871b9
-
SHA512
a6da9e21aa616b608f392ef3db136578411368002655b543f834b0f29229ed0209dc9272c97c22fb43ed5ddcbc0a8bd9d725e886750661a4704b0e6b8b26085c
-
SSDEEP
49152:qvorjcKgbQR6HJ6yO8iAF5RwO+gvZ1PnYa76eD+Ah8FyexdnICOh84j+EKRT:ljcfER6e875KMvzPRbvKyCOm4ibRT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Message_20240703082651_snippa/Message_20240703082651_snippa.wav.exe
Files
-
04072024_0303_03072024_Message_20240703082651_snippa.zip.zip
Password: infected
-
Message_20240703082651_snippa/Message_20240703082651_snippa.wav.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ