Static task
static1
Behavioral task
behavioral1
Sample
c2eb68974fb982502a2f497826f922563d90dfdf32725b44613aa1f957c8d0fd.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c2eb68974fb982502a2f497826f922563d90dfdf32725b44613aa1f957c8d0fd.exe
Resource
win10v2004-20240802-en
General
-
Target
630470e421acd1df856832d7a12b4853.bin
-
Size
8.0MB
-
MD5
be1b1120e34c4d331bfa43f3cbb527d9
-
SHA1
f268425da36c1334ca3cf5c835d64a479465b431
-
SHA256
7ae4f788f2df6be0152e4fd650fc0fa1e8e9fe0a22313d5079e31f4bf197333b
-
SHA512
51b467fd2a6243a8bc1e218a39dfa13364240921220995f5458df51617c1e2d24ba657a5b68cfcf1824fe42db57e51215a3a0377425efdc172b844c3506f8b28
-
SSDEEP
196608:Rpn2uYzIJ0YEleaoUzEDbmPo8wwVKhKsTc6HnSI2yxE/8+n:RpLkIGYnaOWPVK9TcS1KUa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/c2eb68974fb982502a2f497826f922563d90dfdf32725b44613aa1f957c8d0fd.exe
Files
-
630470e421acd1df856832d7a12b4853.bin.zip
Password: infected
-
c2eb68974fb982502a2f497826f922563d90dfdf32725b44613aa1f957c8d0fd.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 8.1MB - Virtual size: 8.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ