Static task
static1
Behavioral task
behavioral1
Sample
85069fe4358136439d3fddb05caa4e8fd79c0865caae5d9a7a88b9a93f6a7553.exe
Resource
win7-20240705-en
General
-
Target
347f2e1df24878147655d99305314839aaa8748801021ce1947ea31fb3f06842
-
Size
263KB
-
MD5
74767c987910bca1d8223b69ec60e07b
-
SHA1
909f1d3f330a1bcc9d6db50a61b46ce968607ab9
-
SHA256
347f2e1df24878147655d99305314839aaa8748801021ce1947ea31fb3f06842
-
SHA512
4f38c509e8f70e7a0a99a3ab63b579da83b11eaa3342d384ad6b606ec39470d1c4c572901f0a31042961173a499f8bc1b1f92c4f08173b5ff403e4accb8cf97c
-
SSDEEP
6144:MI3PcpV2LkZDqIZeeiHF46LWdVgTDsB9cjB:TNLkZdQ7zLWJe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/85069fe4358136439d3fddb05caa4e8fd79c0865caae5d9a7a88b9a93f6a7553.exe
Files
-
347f2e1df24878147655d99305314839aaa8748801021ce1947ea31fb3f06842.zip
Password: infected
-
85069fe4358136439d3fddb05caa4e8fd79c0865caae5d9a7a88b9a93f6a7553.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ