Static task
static1
Behavioral task
behavioral1
Sample
1a0a8dbd910fdedca66b6840177423244bb142dab84f09ff47cf1109a2618b48.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
1a0a8dbd910fdedca66b6840177423244bb142dab84f09ff47cf1109a2618b48.exe
Resource
win10v2004-20240709-en
General
-
Target
32460c730bc418e14b162c3bee673f9d.bin
-
Size
1.8MB
-
MD5
a899501973cd62e1e61eb5de65debb31
-
SHA1
5a747e79e1afdd404592ea1598706ae28cde7efd
-
SHA256
073bea23bb3ce6140e924dcae8a9170d2934b7069e9c97d358491783c269f36e
-
SHA512
282138d4c2d2df60639422cb1a5bbeb5c369f2717ee58f75a60d8d86aeb431f3b77271a225c2e490c33823b22047e7c4ee799417eea343729d75fef842e7ef18
-
SSDEEP
49152:nJ3MchA0vO7bFC8QKUdV5Z9wTffJsFfMk8JH6VEAN70Q:nJNhA0vO7sEKV5Z9wT3mFfMPoD70Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/1a0a8dbd910fdedca66b6840177423244bb142dab84f09ff47cf1109a2618b48.exe
Files
-
32460c730bc418e14b162c3bee673f9d.bin.zip
Password: infected
-
1a0a8dbd910fdedca66b6840177423244bb142dab84f09ff47cf1109a2618b48.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ