Static task
static1
Behavioral task
behavioral1
Sample
deb5555acc0934b9a3d135999733e89b5c6ae98c34b7613f38d517fa4e0b336c.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
deb5555acc0934b9a3d135999733e89b5c6ae98c34b7613f38d517fa4e0b336c.exe
Resource
win10v2004-20240802-en
General
-
Target
024268093aabf0693b24f14171f5691a.bin
-
Size
67KB
-
MD5
f00f4c1f869aa0d278c2c69c2c3e55c6
-
SHA1
71e7a8419475a39e2439d620d3d0c762c694492e
-
SHA256
0597532872e9e511fccefac4f576b371dada75a5af5f49cf6ff83416e5c4cafa
-
SHA512
355f67958fb6ccb9ab63945ccabd710e89c4441f43301c5e732bb3fb68953ad266b5cf8463962c3dbd72e8e5753dc6b2216af5fb85209e663cd44be424ba5a23
-
SSDEEP
1536:heAYTod3m0WR3zKxMy5/w9I/6Uj8N2j1MJKPnPTJ7Cvz:hl/U2by95EaKPPhCvz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/deb5555acc0934b9a3d135999733e89b5c6ae98c34b7613f38d517fa4e0b336c.exe
Files
-
024268093aabf0693b24f14171f5691a.bin.zip
Password: infected
-
deb5555acc0934b9a3d135999733e89b5c6ae98c34b7613f38d517fa4e0b336c.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ