Static task
static1
Behavioral task
behavioral1
Sample
7e329b19cf17a8cba1c7102ed3758a5f50ffc7a95af0a1cf82e3244fa68efb3c.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7e329b19cf17a8cba1c7102ed3758a5f50ffc7a95af0a1cf82e3244fa68efb3c.exe
Resource
win10v2004-20240709-en
General
-
Target
b990ac5e7f65fee5ebd30c139af4ba57.bin
-
Size
846KB
-
MD5
a500384375eb501677b2c6facbdb668d
-
SHA1
b94b0a94636fe4561f564c9d380d397c954e201a
-
SHA256
f7d21f12435478210026e52ad8e8e920ba0e338cf9a91d10310012e558a34e10
-
SHA512
8f965227f7c19239c53bb03652338f1461ee65f71e7984156ca0441687e72ce999400af1e7cf882390bd6c1163dc9ca955bab614e49ea727ca54230ed5f1fd1e
-
SSDEEP
24576:1YJvrp3qg+VfcI+kW+wjS8KsA1ZOS/ckYYD16p+:kDp3f+N+kzDgsl/DsM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/7e329b19cf17a8cba1c7102ed3758a5f50ffc7a95af0a1cf82e3244fa68efb3c.exe
Files
-
b990ac5e7f65fee5ebd30c139af4ba57.bin.zip
Password: infected
-
7e329b19cf17a8cba1c7102ed3758a5f50ffc7a95af0a1cf82e3244fa68efb3c.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 856KB - Virtual size: 855KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ