Static task
static1
Behavioral task
behavioral1
Sample
1fad173e519f8c7cb34093e926807794765789e79d377e89ffe201ae8d76dd99.exe
Resource
win7-20241010-en
General
-
Target
eb16b18a64e98c59dfdd4701f1ec0b3cd4d357abf31a824598843229a677e9bc
-
Size
601KB
-
MD5
404ac227d5fdedd3388097bf467f19e9
-
SHA1
c94d314310dcfba26afa7df63f95b7211e42629a
-
SHA256
eb16b18a64e98c59dfdd4701f1ec0b3cd4d357abf31a824598843229a677e9bc
-
SHA512
d5be271bca804cba2a9a53ee2caff028879daf1eeb16d6983ad9ffa8e477e72f42c1c6ccf4b82ecc5b4ddcebae91c9067a182036c54ef233033b6d85216f5e1c
-
SSDEEP
12288:bNffnn/2zPTEC6rMZ5s8e++A5BFOOEAMKvr081xsHe9J8PFX0mp6:bpfiEDoZW1UBWAMerzwekGY6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/1fad173e519f8c7cb34093e926807794765789e79d377e89ffe201ae8d76dd99
Files
-
eb16b18a64e98c59dfdd4701f1ec0b3cd4d357abf31a824598843229a677e9bc.zip
Password: infected
-
1fad173e519f8c7cb34093e926807794765789e79d377e89ffe201ae8d76dd99.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 626KB - Virtual size: 625KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 185KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ