Static task
static1
Behavioral task
behavioral1
Sample
512ff74ca594632b7c8469ed3a997a38bd91730fe0b35008737dd7d02cb2d0ec.exe
Resource
win7-20240705-en
General
-
Target
d53fbabae0eae53204fb4536ffee7137968b5f4a08dd0c79a2992e620909353b
-
Size
7.9MB
-
MD5
a0ad231d35c038ea2ce1b1c58f8be7c9
-
SHA1
7c6b6dc127d5eb304ccbdbb845c103c6ffcd6ff4
-
SHA256
d53fbabae0eae53204fb4536ffee7137968b5f4a08dd0c79a2992e620909353b
-
SHA512
1c6b22b85c88a36d2efc20c405f063ee8062b60da3d451dd6de4737c43608581d2dc7f790e1ba0454b15cdc6f3aa68fe8429c24bba749757bf0233a20eca3f8b
-
SSDEEP
196608:dpyqBNf4qChOyOM2l6Wzjm8Z0shyhOFm8vXCiDCeo:dhNf4QfM2l6AB0YFm8vSiDCeo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/512ff74ca594632b7c8469ed3a997a38bd91730fe0b35008737dd7d02cb2d0ec.exe
Files
-
d53fbabae0eae53204fb4536ffee7137968b5f4a08dd0c79a2992e620909353b.zip
Password: infected
-
512ff74ca594632b7c8469ed3a997a38bd91730fe0b35008737dd7d02cb2d0ec.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 7.9MB - Virtual size: 7.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ