Static task
static1
Behavioral task
behavioral1
Sample
dc8cd94e547cd182eb96ea6d3af0b25bcf11827d6a0f8fcd4d340358e1f9bc77.exe
Resource
win7-20240903-en
General
-
Target
8527448ad0abb36e21c59136ab49a0886ebbf2548d3277ed7823907d0517d374
-
Size
781KB
-
MD5
734b0c17b31dbef1d482940d22e09071
-
SHA1
64f29d17fb7b511464a90d21cd06d2b7e219d1a7
-
SHA256
8527448ad0abb36e21c59136ab49a0886ebbf2548d3277ed7823907d0517d374
-
SHA512
db77d2ded4a718c5d336d9ad2a9a43649bd4667b2d62c177a6411d27bf1ca3fe9ff2b07fee985be8869451c6ba22dbccec7bd7eb77db045ff08eea3f5bcdfe36
-
SSDEEP
24576:bLPphlFcaL2AjjF07tTXsLGJGufaUjFP/t8Wkt38BK:v3caBjotrsruJpS7tv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/dc8cd94e547cd182eb96ea6d3af0b25bcf11827d6a0f8fcd4d340358e1f9bc77
Files
-
8527448ad0abb36e21c59136ab49a0886ebbf2548d3277ed7823907d0517d374.zip
Password: infected
-
dc8cd94e547cd182eb96ea6d3af0b25bcf11827d6a0f8fcd4d340358e1f9bc77.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ