Static task
static1
Behavioral task
behavioral1
Sample
6329380d049a1006574b29113c573e42a68cb017ed28e6d885a7ccd459a691b2.exe
Resource
win7-20240903-en
General
-
Target
e24be67fe227a3e59ec3da932321fb7d92e98e10d4ce21595c38bc58073a5efb
-
Size
259KB
-
MD5
ce8471e46d5d3343c10e058567ea6fcc
-
SHA1
b51fef846a3597fdb613ed32ac4fd7809ae96133
-
SHA256
e24be67fe227a3e59ec3da932321fb7d92e98e10d4ce21595c38bc58073a5efb
-
SHA512
586a1d640914a2bce4d62fb616cca8374e882c49f880a1a8bcadef6c460d8067e8e53047a6f105a32d99ea22c76da5b83e00db91d0381ad0d503dde7283c6155
-
SSDEEP
6144:KAIc42YkI8hQXAUzZBsLmJegFqFIwQIMCB7T8LMh3QwRVuuM:fnAkI8iqmJsOwQvCt8L63QwRm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/6329380d049a1006574b29113c573e42a68cb017ed28e6d885a7ccd459a691b2.exe
Files
-
e24be67fe227a3e59ec3da932321fb7d92e98e10d4ce21595c38bc58073a5efb.zip
Password: infected
-
6329380d049a1006574b29113c573e42a68cb017ed28e6d885a7ccd459a691b2.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 274KB - Virtual size: 273KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ