Static task
static1
Behavioral task
behavioral1
Sample
355da352f5a3782b61c87156e127d0ad167a379a7b9a0889574c2a773b55a122.exe
Resource
win7-20240903-en
General
-
Target
e44cd14fb92931c26ce2b978c737bc889d806cbde2171c729ddf21b79200307f
-
Size
458KB
-
MD5
cbbcbf820dee08db5fb952f4f238f328
-
SHA1
b198238c35bf9f13ea5eff0755f7c934e5de500e
-
SHA256
e44cd14fb92931c26ce2b978c737bc889d806cbde2171c729ddf21b79200307f
-
SHA512
f766078648036f4c6463ead270f96c74e1b51bf98f3f735bd93cc7dca474ab27f2348b990b5619d8d59c5a1eb7bc4e18a16f82a60e849a567d88c6f60406c42c
-
SSDEEP
12288:QjY/Xgg8Pli0KBNMPO22qxqp8ogFtqeeskCskbM:QjK8Pli0KBNvHp8oNnsMwM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/355da352f5a3782b61c87156e127d0ad167a379a7b9a0889574c2a773b55a122
Files
-
e44cd14fb92931c26ce2b978c737bc889d806cbde2171c729ddf21b79200307f.zip
Password: infected
-
355da352f5a3782b61c87156e127d0ad167a379a7b9a0889574c2a773b55a122.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 585KB - Virtual size: 584KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ