Static task
static1
Behavioral task
behavioral1
Sample
7e97e6e6ccae12c62ee828a165fc3c0945026440716621d90abc77a1f7fc5c62.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7e97e6e6ccae12c62ee828a165fc3c0945026440716621d90abc77a1f7fc5c62.exe
Resource
win10v2004-20240709-en
General
-
Target
c473eeabdcd8405518e7696aab789a37316c81af8783a4faea9a8dc579d76ed1
-
Size
978KB
-
MD5
71c4dadd4516a2fb2d9e25bbaa5d56c7
-
SHA1
92982b3a84e4dfbcd959281a3c7824da2284f7a9
-
SHA256
c473eeabdcd8405518e7696aab789a37316c81af8783a4faea9a8dc579d76ed1
-
SHA512
55959d32a4d03cf961b8230ab5c03181b80b5dfed1c2b73b8685fc3b42850c862838a7e58ff11231324da6f57f4ac844c0c5679eded0e4e3ed532682f17abc1b
-
SSDEEP
24576:vLr/sree7+VVYvNgTiq5Lgezqd+xGITr5S2LaYnnV:vLgree7Ry75seW0ZFnV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/7e97e6e6ccae12c62ee828a165fc3c0945026440716621d90abc77a1f7fc5c62.exe
Files
-
c473eeabdcd8405518e7696aab789a37316c81af8783a4faea9a8dc579d76ed1.zip
Password: infected
-
7e97e6e6ccae12c62ee828a165fc3c0945026440716621d90abc77a1f7fc5c62.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ