Static task
static1
Behavioral task
behavioral1
Sample
577827e2f48011f122d58835338951e8fcef29ab3f17d11062008dd78ab3a6cb.exe
Resource
win7-20240708-en
General
-
Target
dd26890c428fbd34566c4d8e7f77dfd4fc8a7fbadc90c051e643f41b8776519d
-
Size
647KB
-
MD5
2351079060f2204c0e50472948f2ce93
-
SHA1
18cbca5af2d9503d6fe8407e8ecf2037959fe8f2
-
SHA256
dd26890c428fbd34566c4d8e7f77dfd4fc8a7fbadc90c051e643f41b8776519d
-
SHA512
f26b2821347855ebc5436195c5e41e8131c36df2e195a83e3dba15243b986ca3fd6915e23b3eecb43c8f9577a514af5236e26ac4b08b4128b68f36032f5b6c7d
-
SSDEEP
12288:GlpLDdK/kUCKv4ZSY6GnWI3Lt0yhWq2gaNQ/ZvunS9RIWnMI+TeWzi:GzDMjc/3J0ysamS9Jn3Tai
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/577827e2f48011f122d58835338951e8fcef29ab3f17d11062008dd78ab3a6cb
Files
-
dd26890c428fbd34566c4d8e7f77dfd4fc8a7fbadc90c051e643f41b8776519d.zip
Password: infected
-
577827e2f48011f122d58835338951e8fcef29ab3f17d11062008dd78ab3a6cb.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 770KB - Virtual size: 770KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ