Static task
static1
Behavioral task
behavioral1
Sample
5827d53c05670c0d0f65d0ce989000b410cfbfb5a9831107d8dfbb13280501cb.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5827d53c05670c0d0f65d0ce989000b410cfbfb5a9831107d8dfbb13280501cb.exe
Resource
win10v2004-20240802-en
General
-
Target
e955132d899534e27c22009e799e15176be718d618414d5acb4e82e55553b186
-
Size
678KB
-
MD5
b912848681b95dff375b68de4952824d
-
SHA1
cd24ad79c96b26570c0a5c5e8cff30605980c6e7
-
SHA256
e955132d899534e27c22009e799e15176be718d618414d5acb4e82e55553b186
-
SHA512
a1c4a429db2a5e07afb0c2a03a5ad447de55b63bb2442e9e3c7c522815f44cf48a11c8522edd068ceb7f0e625850e94adc3995761003ab554c6c5c0fe2a32326
-
SSDEEP
12288:PFPdt03kbb417vTRnLKArjwUksM8kTBLc/ttAcYc5gww3lzGStF3:PJ03Qbu7rRBrjwUkEttn6wbS3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/5827d53c05670c0d0f65d0ce989000b410cfbfb5a9831107d8dfbb13280501cb.exe
Files
-
e955132d899534e27c22009e799e15176be718d618414d5acb4e82e55553b186.zip
Password: infected
-
5827d53c05670c0d0f65d0ce989000b410cfbfb5a9831107d8dfbb13280501cb.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 689KB - Virtual size: 689KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ