Static task
static1
Behavioral task
behavioral1
Sample
a521b489989a9c3e92621174ec90982d6bbf04ddc074eff4feef54c18017418c.exe
Resource
win7-20240903-en
General
-
Target
f277e98f77e8d53ca0bcd9c0420115414206975f2b3f936c47f12360a3067944
-
Size
771KB
-
MD5
6fd81b3bd547377b55d6d36999a70158
-
SHA1
5be90cadf85164641fd6e1ba4c7235f4759b670e
-
SHA256
f277e98f77e8d53ca0bcd9c0420115414206975f2b3f936c47f12360a3067944
-
SHA512
409d34321d1276795bec7fd83ed866934312916154444e729c9a1c9660584bf1be0eab6a1a30b18bc6a818341a679ea65d1143c8df7040297a36fbf2560d8dc6
-
SSDEEP
12288:p2s/bQJXJcwDk9tFicy6+1pw75U3efBj8HIP3B6QxWqjgpbOpanSzONzVI:pnbQpJcmk9D+05un8B3vQ0Ozm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a521b489989a9c3e92621174ec90982d6bbf04ddc074eff4feef54c18017418c
Files
-
f277e98f77e8d53ca0bcd9c0420115414206975f2b3f936c47f12360a3067944.zip
Password: infected
-
a521b489989a9c3e92621174ec90982d6bbf04ddc074eff4feef54c18017418c.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ