Static task
static1
Behavioral task
behavioral1
Sample
0438b9fd849f4116d4c8d21fcebf1eebc23d7e92553ef1c2d8bf3ab7846efb17.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0438b9fd849f4116d4c8d21fcebf1eebc23d7e92553ef1c2d8bf3ab7846efb17.exe
Resource
win10v2004-20240802-en
General
-
Target
9ee9e268ed3675aec15103ee42b8888a2524ca681071439675817e223761845e
-
Size
442KB
-
MD5
adab6a67548ae583aadd6a6da937902d
-
SHA1
32518ad4ae4985c77316106f815dce0396213420
-
SHA256
9ee9e268ed3675aec15103ee42b8888a2524ca681071439675817e223761845e
-
SHA512
356a795e471cbee14cf04ba8d8eca0b24e295b67f0841cb436612e2d53f549ab3d111450a733ace1f76886f4e81c09572fb3905cf44cb204332eb0c34c0b9013
-
SSDEEP
12288:u+HJh5sqoku8rTWHHBTHaOasdOz31HXHl6D904QJwRWf5Qfd:F5q8rTitL+3Hl66pJwkf5Ql
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/0438b9fd849f4116d4c8d21fcebf1eebc23d7e92553ef1c2d8bf3ab7846efb17
Files
-
9ee9e268ed3675aec15103ee42b8888a2524ca681071439675817e223761845e.zip
Password: infected
-
0438b9fd849f4116d4c8d21fcebf1eebc23d7e92553ef1c2d8bf3ab7846efb17.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 511KB - Virtual size: 510KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ