Static task
static1
Behavioral task
behavioral1
Sample
09f6b7cdce51c287cd7e6b996b89b548827d9e6960a4ac3c24ce8572bb6f2aac.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
09f6b7cdce51c287cd7e6b996b89b548827d9e6960a4ac3c24ce8572bb6f2aac.exe
Resource
win10v2004-20241007-en
General
-
Target
1ea0ce92a9671c932d4839291da7d91b.bin
-
Size
12KB
-
MD5
05e0fdeca31073137595a9d026cab3b2
-
SHA1
093953eaa9d8de04d0b0461fc9b67c2f16b35982
-
SHA256
4c041045f935948daa3fa5501705e1119581b34192f3c82dd3474b0e6d2fb934
-
SHA512
f7e3ecf05d845aa55b8f43c4aac8b4711e95bfa15895fd661d2a67e9c2e9250e1b73af007b2e4ee389f712e3b81f408f200961bb652e1c0c4f985f9a80458bd3
-
SSDEEP
384:kf7YCQIb+5sxxTtUNuBwV5T0zNIdq+CzB+iCFfuL2BG:kfzQIbMsxZ60qV10oq+4pwuYG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/09f6b7cdce51c287cd7e6b996b89b548827d9e6960a4ac3c24ce8572bb6f2aac.exe
Files
-
1ea0ce92a9671c932d4839291da7d91b.bin.zip
Password: infected
-
09f6b7cdce51c287cd7e6b996b89b548827d9e6960a4ac3c24ce8572bb6f2aac.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ