Static task
static1
Behavioral task
behavioral1
Sample
3d2aeedacfc41b9882494188059bcf1c81160920d4e83fc1f604d0381bca9ea7.exe
Resource
win7-20241010-en
General
-
Target
d852ccd99394e8ff281519131ab91e51eaf5c7e0d4dc6b46cdab383d75ecec1e
-
Size
754KB
-
MD5
d2e140d01298f41a26187b902e285296
-
SHA1
3cb1dc250623e099947cb34f677551da08de4e7a
-
SHA256
d852ccd99394e8ff281519131ab91e51eaf5c7e0d4dc6b46cdab383d75ecec1e
-
SHA512
542c144da3524737ceffcb1316c9877986a8b5d836e3c9af28177bee9f4ceb54fbb3a4e6909371454d44416ef669e749e1fe55082720ee7dcb177992390e6c28
-
SSDEEP
12288:dvQTVbXY6q2r/FIBsJYaTPgCvX2Q7LykAD5fLvbwh4NGZdx5xpeG7KrGBz6TCPgB:Yb2K4sJRL/7LyFLv82NGZdx5xpNSGBm9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/3d2aeedacfc41b9882494188059bcf1c81160920d4e83fc1f604d0381bca9ea7
Files
-
d852ccd99394e8ff281519131ab91e51eaf5c7e0d4dc6b46cdab383d75ecec1e.zip
Password: infected
-
3d2aeedacfc41b9882494188059bcf1c81160920d4e83fc1f604d0381bca9ea7.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 878KB - Virtual size: 877KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ