Static task
static1
Behavioral task
behavioral1
Sample
934fce499916c43cb7fa6b0198b18195700a5d6fadc6a716574f8eea92c8a545.exe
Resource
win7-20240903-en
General
-
Target
b6c6bf2d2d2e9471b73629040c382ccafbb4b6d4f1232dff6e6b592088ea33d8
-
Size
603KB
-
MD5
6b02ce3bc0366959cd9a55277cc61ce4
-
SHA1
26d17fef8b850091309a3beeb23284b0af64aa56
-
SHA256
b6c6bf2d2d2e9471b73629040c382ccafbb4b6d4f1232dff6e6b592088ea33d8
-
SHA512
c84a7cb97543a3901feb08014dea28e83631a79bc2be9cc153025934cc2d9db3d849e755d564f8b621933a285ec86bffe3fa348639976beb3aca6e27f8d45e9f
-
SSDEEP
12288:WYonRsDeBG78Kts+iPEV5s3o4qSTdw4nKpJzEwJTzjaF:WYwRU4PX1XUYeTzeF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/934fce499916c43cb7fa6b0198b18195700a5d6fadc6a716574f8eea92c8a545
Files
-
b6c6bf2d2d2e9471b73629040c382ccafbb4b6d4f1232dff6e6b592088ea33d8.zip
Password: infected
-
934fce499916c43cb7fa6b0198b18195700a5d6fadc6a716574f8eea92c8a545.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 838KB - Virtual size: 837KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ