Static task
static1
Behavioral task
behavioral1
Sample
Documente de expediere 00039499885.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Documente de expediere 00039499885.exe
Resource
win10v2004-20240802-en
General
-
Target
10092024_0111_09092024_Documente de expediere 00039499885.img
-
Size
1.4MB
-
MD5
7ecdc5ae33e16467fd6872905246ed0d
-
SHA1
f363e52611fbfcab810e6ef5ea7a014d1ea70fbf
-
SHA256
295d39e2b4ea901d90936ff8696a79892fdcbfd9ca52a0e4ca59c06d68a6886d
-
SHA512
273642b5ae4eb990bfa90418e904b0b8e35d780a2cbbd612d352b2909023e29e7ab52ae9a9f6065891c7c273c6610b6a81f6cc8d5d19552e2c1e7d6675330c40
-
SSDEEP
12288:mx9Y+no3LopTy34dCOUWxr03jWkBJPc9Y+S/ks5FiB6vCXTDE0/Fi6j:mIMo3qYWlMWkvcK+S/1Y5X80/p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Documente de expediere 00039499885.bat
Files
-
10092024_0111_09092024_Documente de expediere 00039499885.img.iso
Password: infected
-
out.iso.iso
Password: infected
-
Documente de expediere 00039499885.bat.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 833KB - Virtual size: 832KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ