Static task
static1
Behavioral task
behavioral1
Sample
97fa3b7bb71b37e59fe1ff289123ca79d25ca799677cc21e338813604d42c858.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
97fa3b7bb71b37e59fe1ff289123ca79d25ca799677cc21e338813604d42c858.exe
Resource
win10v2004-20240704-en
General
-
Target
c06cec41d0e9f0b85f919a694b746de7.bin
-
Size
460KB
-
MD5
4597eb0f25cb79159c4b242d0f82dd17
-
SHA1
a7bd728c919c8eb2d3138389972c85526b8cdb63
-
SHA256
29b9cb4592038794b12ade6eafa393448618c2818dbe3616c29f0bc998bfbc9a
-
SHA512
8078c8db5c87c239fd2ed7fa841d94ab4564c3eca5b22d5efce9291a80e89d83097177ab5a76ce279e6db94d1df08f8667ec38363553e5b44e5432591be76def
-
SSDEEP
12288:oOfBAIpywR2t1cql1BIaU5pbyb2zu4H3yFsceqmRgS1jdvJZ9r6:JthOcql1w57t3rceqmRgedl6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/97fa3b7bb71b37e59fe1ff289123ca79d25ca799677cc21e338813604d42c858.exe
Files
-
c06cec41d0e9f0b85f919a694b746de7.bin.zip
Password: infected
-
97fa3b7bb71b37e59fe1ff289123ca79d25ca799677cc21e338813604d42c858.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 642KB - Virtual size: 641KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ