Static task
static1
Behavioral task
behavioral1
Sample
b092672d7f36d3deaab664c0a562b055f9cee3f247328e639aca58f025f979ca.exe
Resource
win7-20240903-en
General
-
Target
8381d19dc58f90b1128943d60b41930dd0619f4a7ef0f2940aff2f5f8c234627
-
Size
408KB
-
MD5
45ce6a1195a842497365258b706e319a
-
SHA1
2afa306daefdf66f760cfb2b96b8eca040932242
-
SHA256
8381d19dc58f90b1128943d60b41930dd0619f4a7ef0f2940aff2f5f8c234627
-
SHA512
019a6f0ec3003a363ffbd8ea00875454c33d78e832c35e322641af56acb80c3a46a9288195f0a4e9d4b676342be8fd1dd19dea014d77975e7a776b26a44d6b4f
-
SSDEEP
12288:54zckY023RBIEtjdg1XRtT0yDH8QiJa51AU:54zckY023MEtjiXRtT0yDHj8U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b092672d7f36d3deaab664c0a562b055f9cee3f247328e639aca58f025f979ca
Files
-
8381d19dc58f90b1128943d60b41930dd0619f4a7ef0f2940aff2f5f8c234627.zip
Password: infected
-
b092672d7f36d3deaab664c0a562b055f9cee3f247328e639aca58f025f979ca.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 477KB - Virtual size: 477KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ