Static task
static1
Behavioral task
behavioral1
Sample
Официално писмо № 0280_08_09-10-2024г.docx.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Официално писмо № 0280_08_09-10-2024г.docx.exe
Resource
win10v2004-20240802-en
General
-
Target
632d21f1992f8a51989c1127f0aec2cfab45dc4c8576155a2fce35ce554e6667
-
Size
944KB
-
MD5
a669105ab713b5a14a30857a469539ae
-
SHA1
bcbe6be9d99761a3f8fce73df4dafde85cc6c711
-
SHA256
632d21f1992f8a51989c1127f0aec2cfab45dc4c8576155a2fce35ce554e6667
-
SHA512
66125a6af1432646193be3e1cc011bf76c5dc3ecfd6aba9f45de8b6aaa577e1095353997164b9c0283e4bb8014418f7043544ea155e8e39697da851eed621002
-
SSDEEP
24576:DWP703QkJD5BqcrA2VEdWikOAYj+Te9y2:z3QkEcrADWjOAPe9r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Официално писмо № 0280_08_09-10-2024г.docx.exe
Files
-
632d21f1992f8a51989c1127f0aec2cfab45dc4c8576155a2fce35ce554e6667.rar
-
Официално писмо № 0280_08_09-10-2024г.docx.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1004B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ