Static task
static1
Behavioral task
behavioral1
Sample
e6dd5a2bbbaec7c7cc5d6c68070ceacacd7d364806bbe31dd365cf161a61d3c0.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e6dd5a2bbbaec7c7cc5d6c68070ceacacd7d364806bbe31dd365cf161a61d3c0.exe
Resource
win10v2004-20240802-en
General
-
Target
a07e0d590556c445729aed78b74913c83e4ccf5080fbead8cf2aded8fd166e5b
-
Size
313KB
-
MD5
e3cd05c470abe18ecfc77b93c49220b8
-
SHA1
9f37a4a49424d21fd56d3638b16dba2c241e06d7
-
SHA256
a07e0d590556c445729aed78b74913c83e4ccf5080fbead8cf2aded8fd166e5b
-
SHA512
5e54271782f4c0af30b445897a38a14b35cc08462944b87649b72354b95e5411e1c6db4eb59df5a3d3d368c752600573c0fc10082811fe9f5cd6e70fdb7bd4d8
-
SSDEEP
6144:OhjpHgxz03pf8MyB53mXMhAPVIOven5B1HP0laB6OyvZ76XgrEigk++qgKm0fG4h:OOtwMaegene8V676wwBkTt0+4h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/e6dd5a2bbbaec7c7cc5d6c68070ceacacd7d364806bbe31dd365cf161a61d3c0
Files
-
a07e0d590556c445729aed78b74913c83e4ccf5080fbead8cf2aded8fd166e5b.zip
Password: infected
-
e6dd5a2bbbaec7c7cc5d6c68070ceacacd7d364806bbe31dd365cf161a61d3c0.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 371KB - Virtual size: 371KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ