Static task
static1
Behavioral task
behavioral1
Sample
54eafd9bd8105444ccd57e92dc3bee43166532da0a71e26686fe9913956f6243.exe
Resource
win7-20240708-en
General
-
Target
0dbb02c1e2339d63e0a48e0eb8eeada5c904a2aabf354137a66c2232268c0e81
-
Size
219KB
-
MD5
eeae6ed0cb9617db5e467c8e924bd04b
-
SHA1
643b8a3c7bbe8ee6280c0a8fdfddded4d3b2a85d
-
SHA256
0dbb02c1e2339d63e0a48e0eb8eeada5c904a2aabf354137a66c2232268c0e81
-
SHA512
2fa53ffceac469d93428450b778e6e9d6e2e5e07a7c963ffdf8196bf44a36750a7967279035f5ece301919ee29819129c330fc5c64e78a65da6fa1948c0bf138
-
SSDEEP
6144:lnINzSas+oWnQT9/u1SUGykrGVA7YKAdDqP:5rafXnOu1L8rGjKP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/54eafd9bd8105444ccd57e92dc3bee43166532da0a71e26686fe9913956f6243.exe
Files
-
0dbb02c1e2339d63e0a48e0eb8eeada5c904a2aabf354137a66c2232268c0e81.zip
Password: infected
-
54eafd9bd8105444ccd57e92dc3bee43166532da0a71e26686fe9913956f6243.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
A;&ne' Size: 193KB - Virtual size: 193KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ