Static task
static1
Behavioral task
behavioral1
Sample
374ea99fca7187421ea94e7cd3e285060d708b4ace157dae1461346e7f562958.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
374ea99fca7187421ea94e7cd3e285060d708b4ace157dae1461346e7f562958.exe
Resource
win10v2004-20241007-en
General
-
Target
dfef9480066373672ca815b2ea5dfa7f
-
Size
490KB
-
MD5
dfef9480066373672ca815b2ea5dfa7f
-
SHA1
5852a71baa19fa664e3f8a4ec23b998d17ec27a5
-
SHA256
9ee58196efed5d652dbb5621460487125a8e86e24b1948352fa9ad2eb5327d42
-
SHA512
e048464c6890db5f8578fd56dc3e78c42b942da4927d805aab3669af1a9316e91df91e7279f194ae3b514cad51dd39e1bec268b0e8dcae3a63eff220de55fd21
-
SSDEEP
12288:Xk7v8PP9D7idZUYDb8cmm7Asydwa7jYUm29dF5CD8R:Xk70n9D7o8cR+dt7j5m+MD8R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/374ea99fca7187421ea94e7cd3e285060d708b4ace157dae1461346e7f562958.exe
Files
-
dfef9480066373672ca815b2ea5dfa7f.zip
Password: infected
-
374ea99fca7187421ea94e7cd3e285060d708b4ace157dae1461346e7f562958.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 531KB - Virtual size: 531KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ