Static task
static1
Behavioral task
behavioral1
Sample
506458aaeef61f70cf73da3d71d5452cd859cfd9fbcc7cf515d27265ace2421d.exe
Resource
win7-20240729-en
General
-
Target
573e83b907d3f2614078fe1ed3facb87fffeeb2d445b7cd4fd9fab7039733e31
-
Size
364KB
-
MD5
1d8c9a6501fff75d9624d56de7203326
-
SHA1
b2c06d4950bfad2eb59311a248b9960925622b4c
-
SHA256
573e83b907d3f2614078fe1ed3facb87fffeeb2d445b7cd4fd9fab7039733e31
-
SHA512
954507ba6d0dd977fabab988a76aada88ce9ae9e2890951803415aa0516ea9461f3e53a7ceb83905b1615a96babed1a63bf5ffa58c2ff2573ccb97a965b4c5f7
-
SSDEEP
6144:2D8d/9Gt4R9IYeE57PnoD40oonkgqiuz7FAGzFg+vCoe4zdUP1aNSJcA3mh:+I64R9XeEhoD40oonkgqJ7Fm2Lez1aQM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/506458aaeef61f70cf73da3d71d5452cd859cfd9fbcc7cf515d27265ace2421d
Files
-
573e83b907d3f2614078fe1ed3facb87fffeeb2d445b7cd4fd9fab7039733e31.zip
Password: infected
-
506458aaeef61f70cf73da3d71d5452cd859cfd9fbcc7cf515d27265ace2421d.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 422KB - Virtual size: 422KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ