Static task
static1
Behavioral task
behavioral1
Sample
7e6427a98f29121c3cb7f3ddaf8aa6d320692178c7d178a0afa501a768459429.exe
Resource
win7-20240903-en
General
-
Target
8ef3fecd16665ebbeb83615a773afbaef4dfd20882b257490f6db7e3c8216c4f
-
Size
563KB
-
MD5
c0bbe72fed26e0dd79edd08bfd033c46
-
SHA1
4b74dede0cb1bc574df62b9763950c26511550e9
-
SHA256
8ef3fecd16665ebbeb83615a773afbaef4dfd20882b257490f6db7e3c8216c4f
-
SHA512
8aeac60227dd20fdad324b0bdb3a5ddd72f41a29d8b740c8f969452059f80f6dbefdb7db0ca8a55df4da4a3c3b4a9e8d173267e2f8dc9bd8a06ffbfa646fb65a
-
SSDEEP
12288:B+VMuwoNqWjAoBajre8ZQ5JLEL2pkCs5cy7sKK6YWQkZ:4PwoFMOajHZyq6iCs5/sKK6EG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/7e6427a98f29121c3cb7f3ddaf8aa6d320692178c7d178a0afa501a768459429
Files
-
8ef3fecd16665ebbeb83615a773afbaef4dfd20882b257490f6db7e3c8216c4f.zip
Password: infected
-
7e6427a98f29121c3cb7f3ddaf8aa6d320692178c7d178a0afa501a768459429.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 563KB - Virtual size: 562KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 169KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ