Static task
static1
Behavioral task
behavioral1
Sample
2416408f0c44630a0a34198b1f0cfcc39433230236cf8ab3e09ceba77a749467.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2416408f0c44630a0a34198b1f0cfcc39433230236cf8ab3e09ceba77a749467.exe
Resource
win10v2004-20240802-en
General
-
Target
a8fab2b247f4850bfd0db73085cecaa8ffb10196727a808202a13b2c4ff39cc7
-
Size
442KB
-
MD5
4e4d656bfbf29be55edbd8c02fc55137
-
SHA1
8965758014ee0e4f53a6e04255a46d0e46fec947
-
SHA256
a8fab2b247f4850bfd0db73085cecaa8ffb10196727a808202a13b2c4ff39cc7
-
SHA512
7dea583df3aab464a4677987a5610914164f5326735a67026c128be04ff7b4997fbcbd2f49df31eee2afbb4831aeabf77b7c78a5fc7a5a53c6d50034ad0e63c9
-
SSDEEP
12288:k4bHjW+GGwJyKPQpwupeUnz1dX4WWmy39R2:FfWS8yCVucUnf4lBG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2416408f0c44630a0a34198b1f0cfcc39433230236cf8ab3e09ceba77a749467
Files
-
a8fab2b247f4850bfd0db73085cecaa8ffb10196727a808202a13b2c4ff39cc7.zip
Password: infected
-
2416408f0c44630a0a34198b1f0cfcc39433230236cf8ab3e09ceba77a749467.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 484KB - Virtual size: 484KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ