Static task
static1
Behavioral task
behavioral1
Sample
Doc00998000.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Doc00998000.exe
Resource
win10v2004-20240802-en
General
-
Target
b2b28579e226656e968ea531280f427966624c79.zip
-
Size
368KB
-
MD5
5e065dbc693633c60eea63c6f9273e80
-
SHA1
9a25e3e884b793f02e60a5481ef9047c853e5352
-
SHA256
d13eb8350780b11c3a015c4cbfe62c6b530c8185b23e4918412d2194cd2fa32a
-
SHA512
67b0f76bf74f9eb6d88a5599fda78b6092f3b23d652dcd86731266195d344e0c4adf3012c1111feccf440894d2a85258e7a5edfb4bb3f6036b6b3d4272eea853
-
SSDEEP
6144:/jbfy2CMRQXm8g24h671nfEf8db+V5EZZ+Q51I3gOgIlv+25RlBHipq5w/D1Lbo+:3fpRQXmRh6KfkqV5EL+dQOgIlvr5bhiz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Doc00998000.exe
Files
-
b2b28579e226656e968ea531280f427966624c79.zip.zip
Password: infected
-
b2b28579e226656e968ea531280f427966624c79.rar
Password: infected
-
Doc00998000.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 554KB - Virtual size: 554KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ