Static task
static1
Behavioral task
behavioral1
Sample
31833cde7ba680be221901a298bcec2356a2db2f89469abda6cbb6376aefeeba.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
31833cde7ba680be221901a298bcec2356a2db2f89469abda6cbb6376aefeeba.exe
Resource
win10v2004-20240802-en
General
-
Target
800a367f37a84bd25599e4b00195337ec65ef51988baca47b8503379c6dd7e76
-
Size
1.1MB
-
MD5
e1ca36bae9e64fdbc7f1ac9d9b410fff
-
SHA1
98c5c70e6fa1543e9f0c265e4ee440200db29be3
-
SHA256
800a367f37a84bd25599e4b00195337ec65ef51988baca47b8503379c6dd7e76
-
SHA512
e13bd871c981b5003e7bf8e0230cbc56e5c02dd0b80884ea28ce3448b8dc6f8db330e1b8d20dfeb49f6357840b031b0b4495c2168abac405241a3f4342ae2bff
-
SSDEEP
24576:LjIOh64L2HyPouieraLsIzV7ys8lkHntqkaQOCT3V9T0UZH:LjIO8YTou9+VzjtqZ/Cp9QAH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/31833cde7ba680be221901a298bcec2356a2db2f89469abda6cbb6376aefeeba
Files
-
800a367f37a84bd25599e4b00195337ec65ef51988baca47b8503379c6dd7e76.zip
Password: infected
-
31833cde7ba680be221901a298bcec2356a2db2f89469abda6cbb6376aefeeba.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 977KB - Virtual size: 977KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ