Static task
static1
Behavioral task
behavioral1
Sample
Device/HarddiskVolume3/Windows/CSC/v2.0.6/namespace/macvdfs01a/users01$/501393/Desktop/IT/AppCheckDC.exe
Resource
win11-20240709-en
General
-
Target
2024-07-22_03_06_19.643.zip
-
Size
148KB
-
MD5
0588567c1db88990fb6070a386a73bc1
-
SHA1
0c2bad8521a6279418b3c47bd40872f2427dd5b9
-
SHA256
46d254f8592770e866e846f27848128850099f17ce1b37c9a703b67e133a8be7
-
SHA512
22cc89628cf8a4aed60ed595ee75373ac572b500b311023effbe00320d9205d73aa7d8355911e6474a2534cc1afd86e87e18c73bf69eede549e7e2be078ffd30
-
SSDEEP
3072:p9K/FLIRkjkov51YxP15SS2RQfOyrfRgmmVM/6M9Reg6ievr5g:p9KBINoh1K15SOOyrROVxM9ReXrO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Device/HarddiskVolume3/Windows/CSC/v2.0.6/namespace/macvdfs01a/users01$/501393/Desktop/IT/AppCheckDC.exe
Files
-
2024-07-22_03_06_19.643.zip.zip
Password: Infect123!
-
Device/HarddiskVolume3/Windows/CSC/v2.0.6/namespace/macvdfs01a/users01$/501393/Desktop/IT/AppCheckDC.exe.exe windows:4 windows x86 arch:x86
Password: Infect123!
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 212KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
manifest.json