Static task
static1
Behavioral task
behavioral1
Sample
da9e45efadb2232b4c6f1ec165bd01a0c9d274f045d058b5c1376106b47b053f.exe
Resource
win7-20240903-en
General
-
Target
8da358d4b7d180480aba90d78ecff7ae.bin
-
Size
843KB
-
MD5
722e6655846240ce94ae55d0bd798859
-
SHA1
b6c822e019301e74bb2ad71ea3ee512cf3fe9c74
-
SHA256
2059894744994d02d06075173056dff2829559bb1a073ef43d105df3f1e6707f
-
SHA512
e81125db5d2237bcb63530cefa85b1a66fd154faf99718d6105b02eb021f943f3f392d38eebc5345ee003efc0ab4965dcb5c0c86271678101b49bb6acb27a7b0
-
SSDEEP
24576:muLIPHnLBnnJAutUgSURCPUV8pfhUSWEfZ:yHLluutKSifhUHEx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/da9e45efadb2232b4c6f1ec165bd01a0c9d274f045d058b5c1376106b47b053f.exe
Files
-
8da358d4b7d180480aba90d78ecff7ae.bin.zip
Password: infected
-
da9e45efadb2232b4c6f1ec165bd01a0c9d274f045d058b5c1376106b47b053f.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 874KB - Virtual size: 874KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ