Static task
static1
Behavioral task
behavioral1
Sample
P24002603.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
P24002603.exe
Resource
win10v2004-20240802-en
General
-
Target
1cb8f2cfc7ca85a798434bcc93d9b826.bin
-
Size
1.6MB
-
MD5
2450e9a007d323f402e2c2dcf8e99bc7
-
SHA1
46923efa93a51f94998154052ef6d9e4821138e9
-
SHA256
f36f5ddacaa5c8b0f9de1d1b369e06f0e4172d62a846377f11c6169cf475a94f
-
SHA512
054a941c8598e150fd723842d36f60a75eb088b72c9d9839c16d988b83979b1b97181c53988464dbe318d147514536eff616f7552160f73b1d2eda766c36d336
-
SSDEEP
49152:ujEmZdWKLD7TfkGp4eUFM8/LddHCKQTD69BtMaV0WF73q:uYSdW2f0LviZv2rnFzq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/P24002603.exe
Files
-
1cb8f2cfc7ca85a798434bcc93d9b826.bin.zip
Password: infected
-
73064bb1582f984972ec6546f7d5931881f0d605d6c84f099ddebe0bf91dac22.img.iso
Password: infected
-
P24002603.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ