Static task
static1
Behavioral task
behavioral1
Sample
78401f1b4780b93624c6074650094b2bbc4f0422da436aaf64663ce5e49b8570.exe
Resource
win7-20240903-en
General
-
Target
2e13c8c9e4a104979088371bad9af9d6f43452989742ea0626829ca16ac1fb4b
-
Size
467KB
-
MD5
0ce9f1a65b99498d52fb4fb21ab0f5b4
-
SHA1
607b06fda147a8afd659b0d7f900c4820f3200be
-
SHA256
2e13c8c9e4a104979088371bad9af9d6f43452989742ea0626829ca16ac1fb4b
-
SHA512
f73967ede62d65950006e6902de8dbe525d920a2ee584ed4e05eb08dfa3b30b2f9d89ae595f0124064b051520cacd20607ddb51d81413ff3cc5cd2f4653dddc9
-
SSDEEP
12288:2aIUdZ7Xsa75qVWWfCPzJVATm53/ugpqwQJI1zncqWv/nkGFt:DRPoc52Ouy3/9pqEXW3fFt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/78401f1b4780b93624c6074650094b2bbc4f0422da436aaf64663ce5e49b8570.exe
Files
-
2e13c8c9e4a104979088371bad9af9d6f43452989742ea0626829ca16ac1fb4b.zip
Password: infected
-
78401f1b4780b93624c6074650094b2bbc4f0422da436aaf64663ce5e49b8570.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 628KB - Virtual size: 628KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ