Static task
static1
Behavioral task
behavioral1
Sample
f87529bd57f54630ff4e0a8391d2e02bd04df4b83ec7c2b879dc258f81103978.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f87529bd57f54630ff4e0a8391d2e02bd04df4b83ec7c2b879dc258f81103978.exe
Resource
win10v2004-20240802-en
General
-
Target
0f57ae41680d7b7a0aea7118cd23136f.bin
-
Size
707KB
-
MD5
567b70fca3d99a702cfbd5a74f6a826d
-
SHA1
57c209029677c02e5f90e6a925957657d3a46b38
-
SHA256
8038622943cdf74af588d37fe2a32bc995441b31a36a476696e2645496c5e234
-
SHA512
2f3a537ea3c03dfd7243c062f3a77d6d03c7df7252d92f40bae9bfd632ee6db6ca20dd405409ceaf233e9b1c88bc76e36cd87c5ecc3a229eecbb13130a1b0dcc
-
SSDEEP
12288:GPbMDO9C8uBa0WN7r8Oa6iAs/tY4kh0SrBoecWGo7YSCNDZsJEDtl1W6Xh:on9C8dN7IOAAs/qDrBLcWGC0DZRb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/f87529bd57f54630ff4e0a8391d2e02bd04df4b83ec7c2b879dc258f81103978.exe
Files
-
0f57ae41680d7b7a0aea7118cd23136f.bin.zip
Password: infected
-
f87529bd57f54630ff4e0a8391d2e02bd04df4b83ec7c2b879dc258f81103978.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 837KB - Virtual size: 836KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ