Static task
static1
Behavioral task
behavioral1
Sample
93e54839118561584c3e736d6b03acfbec1373cfe5b9b9dffdb3d57e96be7d4a.exe
Resource
win7-20240903-en
General
-
Target
f0c8c1357cbd28ced41b65a180915bc9df4e44a60f722dd2c582dc1d00073ed5
-
Size
753KB
-
MD5
8aed68b85ffbf3b0ce66fc8a331bf8dc
-
SHA1
2f262f5873924abae534ab03ca4c8bd33f2006e8
-
SHA256
f0c8c1357cbd28ced41b65a180915bc9df4e44a60f722dd2c582dc1d00073ed5
-
SHA512
e4b296632a0e2c0def01e26e2e6a650b61ada377764d67dae21266c6b69b8abc6453eaa0759c43ee9554bc48df26d9ca71adb436bd7c253034d1ec9ff38fd48f
-
SSDEEP
12288:5mPoaTjum1uj5w6my5slBB6QWHKLwubKvhohNnk6GyrHhNNRFkf/CIk25YuCfPOW:ggiK4K9mBB6hQcWNnhGyLhta/nDWXF2W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/93e54839118561584c3e736d6b03acfbec1373cfe5b9b9dffdb3d57e96be7d4a
Files
-
f0c8c1357cbd28ced41b65a180915bc9df4e44a60f722dd2c582dc1d00073ed5.zip
Password: infected
-
93e54839118561584c3e736d6b03acfbec1373cfe5b9b9dffdb3d57e96be7d4a.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 840KB - Virtual size: 839KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ