Static task
static1
Behavioral task
behavioral1
Sample
8bdde20f5655fa32fc546f3b4e66b3b2a2872c0e55a73c377245808ffd218829.exe
Resource
win7-20240705-en
General
-
Target
15bd4ca6b9d238c9eca4159e5ac550c7.bin
-
Size
1013KB
-
MD5
895bc97a82dd7f398846367133927afe
-
SHA1
911dab8de7fac54f99d6e295fbacc09229ecf992
-
SHA256
a2f69b6a85b381ecba7e30df20879bd52ab88a81659556ca498ebf848ed7a195
-
SHA512
86acd311dcc8212a1d58e14c22ef617ad7bcab25dda5e231b1dca1b887ae2b0fc0c9a0daf641eabfb815601468ea455f83a3f7ea0806a150fd73a9031da7c05c
-
SSDEEP
24576:GqU9oRRysa347D6Ajyj2DLokzigaARP1YwpawBVhP0BieSE:XQ3SDsqr551YwpfP0D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8bdde20f5655fa32fc546f3b4e66b3b2a2872c0e55a73c377245808ffd218829.exe
Files
-
15bd4ca6b9d238c9eca4159e5ac550c7.bin.zip
Password: infected
-
8bdde20f5655fa32fc546f3b4e66b3b2a2872c0e55a73c377245808ffd218829.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1012KB - Virtual size: 1012KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ