Static task
static1
Behavioral task
behavioral1
Sample
f65dccca258ad9ea722aa7a66188f55f5f80a274bb9090a02f4c3b6d7ef9fe5e.exe
Resource
win7-20240903-en
General
-
Target
487037ef86c737e048438eb25320f0667558d8faac0e8795b05a81323dd6430e
-
Size
269KB
-
MD5
9b12e6998a33dd308a17658845356e83
-
SHA1
0c134dee4340cb905eccd45dcf88ccdbdffbaa73
-
SHA256
487037ef86c737e048438eb25320f0667558d8faac0e8795b05a81323dd6430e
-
SHA512
4085d9e4ff62d776c265e90e768b7b558b1fc4713d6ff1214b7351f8b3fc120a184b2b7be41c0902aa031e25b37a85c42d6ca881308b07a7810c25d67c584a03
-
SSDEEP
6144:geyplVXtCnUPNVZkClL5PlHcmef27bHsJIDT0HAZu:CplvCUVVZkClLK2vUILu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/f65dccca258ad9ea722aa7a66188f55f5f80a274bb9090a02f4c3b6d7ef9fe5e.bin
Files
-
487037ef86c737e048438eb25320f0667558d8faac0e8795b05a81323dd6430e.zip
Password: infected
-
f65dccca258ad9ea722aa7a66188f55f5f80a274bb9090a02f4c3b6d7ef9fe5e.bin.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 414KB - Virtual size: 414KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ