Static task
static1
Behavioral task
behavioral1
Sample
0aaa73b1b2b951f7a10dc7a4c8e77b2f659ca543f6b650894f92976342bad792.exe
Resource
win7-20240903-en
General
-
Target
4e83c1441f252782103187e9bbbbfd734b5a84474b48164d02f1fdd7260ab45f
-
Size
663KB
-
MD5
19b547c7e1a368ec0e092d3285f7e9cb
-
SHA1
d47cb209eecd77030856abe1d25e207ec13510d9
-
SHA256
4e83c1441f252782103187e9bbbbfd734b5a84474b48164d02f1fdd7260ab45f
-
SHA512
0f8597a883fde70c22a82e8c4d19844d505d6eca11bde150b09a1e952b036c5f6eebd70d6788c699ecdebdd6354b7ea38782f026868f00f63c89266ecc38b290
-
SSDEEP
12288:0V8YgdM7w0lYbbAvLvjarcblTOPUo1mtAoo4TACT:0CYgdME0e3q+2OPUZtAM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/0aaa73b1b2b951f7a10dc7a4c8e77b2f659ca543f6b650894f92976342bad792
Files
-
4e83c1441f252782103187e9bbbbfd734b5a84474b48164d02f1fdd7260ab45f.zip
Password: infected
-
0aaa73b1b2b951f7a10dc7a4c8e77b2f659ca543f6b650894f92976342bad792.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 742KB - Virtual size: 742KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ