Static task
static1
Behavioral task
behavioral1
Sample
2b700f4c8c95319e90414db0e22d42467ebf5843d397b907f817672b9501ade1.exe
Resource
win7-20240903-en
General
-
Target
2a8d5a1ffaab412d105732aa88021fa9.bin
-
Size
223KB
-
MD5
26b9cc193e45cd2d6b416d3428dfa897
-
SHA1
64c94e09726e900b21da24d7709ed57983984fbb
-
SHA256
a31418649e34c3dc565170c37075fcdd93a158dd2e16ac80688ec2cbe58134c2
-
SHA512
5f9d93884dfec12b27448aaddc41584cbf74befff4b2503c386dd957c795b165cabd4f82d95e1b5043e98cc00e258888e6e8155dcb042d143f61485e5de537bb
-
SSDEEP
6144:9nXJH9KAVRZo1+vGRruUFbUDzpFBPxXuXtOMmAr:NZHlfS/RpeF5Vudlm0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2b700f4c8c95319e90414db0e22d42467ebf5843d397b907f817672b9501ade1.exe
Files
-
2a8d5a1ffaab412d105732aa88021fa9.bin.zip
Password: infected
-
2b700f4c8c95319e90414db0e22d42467ebf5843d397b907f817672b9501ade1.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
4X2oVv Size: 199KB - Virtual size: 199KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ