Static task
static1
Behavioral task
behavioral1
Sample
b271f15120e69ae544c096b528961dcb21eb06dab1044973bce2628b2b9e2eaa.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b271f15120e69ae544c096b528961dcb21eb06dab1044973bce2628b2b9e2eaa.exe
Resource
win10v2004-20240802-en
General
-
Target
353a06ea99f982edf0784f0fc757707efdd89e78626c77e383f52ef5c9d65b1c
-
Size
269KB
-
MD5
3f9324717014832662b03b0fa25f4128
-
SHA1
d5a5440068c4578f3c07957f6b73e2be86c14ad3
-
SHA256
353a06ea99f982edf0784f0fc757707efdd89e78626c77e383f52ef5c9d65b1c
-
SHA512
516a75a3e03cc543c3d2a64adf0a1b38bb477831f94857ee7aa65599af10f5fb94b24f434dbf8450f5c44534a1d8b354143d4f85254ae4a36f5c0054ea9f8fed
-
SSDEEP
6144:xYzDfFOowHUZSLm9Pw/FqlY6z7a/OUPJeHuP32NqjW0y1Ur13M:xQDdOjHrKUwlUJau+ukv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b271f15120e69ae544c096b528961dcb21eb06dab1044973bce2628b2b9e2eaa
Files
-
353a06ea99f982edf0784f0fc757707efdd89e78626c77e383f52ef5c9d65b1c.zip
Password: infected
-
b271f15120e69ae544c096b528961dcb21eb06dab1044973bce2628b2b9e2eaa.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 323KB - Virtual size: 322KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ