Static task
static1
Behavioral task
behavioral1
Sample
1e936a3027bad9d485df3d0356a8c8a22838851a66dfa7708e57855cfe54ded0.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1e936a3027bad9d485df3d0356a8c8a22838851a66dfa7708e57855cfe54ded0.exe
Resource
win10v2004-20241007-en
General
-
Target
3401188a34dbf71336f46e8ec5019db4f12b1d137201166982d00d3c2c3f3d6c
-
Size
10.2MB
-
MD5
8bdde3c996a88c9a91d3827c7953cce7
-
SHA1
ac38cbe51f3db755e7581d3578f79988b873a8e7
-
SHA256
3401188a34dbf71336f46e8ec5019db4f12b1d137201166982d00d3c2c3f3d6c
-
SHA512
e81cb480cf95801447f89907355c94cee82435a8f4c25438b0ea2a90a3a591b4c440271c744d2d7ed68568d5f3eebdf64a6183f522b7290d94433b054a5d2aab
-
SSDEEP
196608:Vi22DjJklRW57tye0TmknK0725IVZYn0YN6aAVFkuK2ok6g5I:Q/JklR0QmkDiQZiNhATTK2dha
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/1e936a3027bad9d485df3d0356a8c8a22838851a66dfa7708e57855cfe54ded0
Files
-
3401188a34dbf71336f46e8ec5019db4f12b1d137201166982d00d3c2c3f3d6c.zip
Password: infected
-
1e936a3027bad9d485df3d0356a8c8a22838851a66dfa7708e57855cfe54ded0.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 380KB - Virtual size: 379KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ