Static task
static1
Behavioral task
behavioral1
Sample
753d66621ae168b5968406b8c2ad1845f1c9bf42f47556e7646d14e8484adeb8.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
753d66621ae168b5968406b8c2ad1845f1c9bf42f47556e7646d14e8484adeb8.exe
Resource
win11-20240802-en
General
-
Target
753d66621ae168b5968406b8c2ad1845f1c9bf42f47556e7646d14e8484adeb8.zip
-
Size
230KB
-
MD5
1b3a6f752fa8273cd9bcf3ae92f1f5a3
-
SHA1
e508b666afd085ccf7f6b4a796307bec3efda942
-
SHA256
f520de18c104871d561a706c63f656c82be4a1b884352d0855368ea101f7e4d7
-
SHA512
1f12acb6669dd76964094e849e4285051d011ea432964b778ddb1f1acc90a8ce02e9ce4027db8db11e3444ae6a1a5b2d23743af81f295c4f880c044538c96016
-
SSDEEP
6144:ilRHFZqjx2agp/gOzz+Dy3IqATS2s8Tdka7HEDYMdi:qRHFIjoa+/v+IIRvPRundi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/753d66621ae168b5968406b8c2ad1845f1c9bf42f47556e7646d14e8484adeb8.exe
Files
-
753d66621ae168b5968406b8c2ad1845f1c9bf42f47556e7646d14e8484adeb8.zip.zip
Password: infected
-
753d66621ae168b5968406b8c2ad1845f1c9bf42f47556e7646d14e8484adeb8.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 465KB - Virtual size: 464KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ