Static task
static1
Behavioral task
behavioral1
Sample
3fd3f37912e5aa23fceb3877d6ee43c8b102410d4fc90b147aab266972939b07.exe
Resource
win7-20241023-en
General
-
Target
0a7a5f4a91ffb0759dd7e1fe9ddfe419c96e4d881060fc93968f92dd0b2aca8b
-
Size
465KB
-
MD5
e88073c9b288839176876172a2010487
-
SHA1
906408ad46e564b045063c4e1661379e7f46abd2
-
SHA256
0a7a5f4a91ffb0759dd7e1fe9ddfe419c96e4d881060fc93968f92dd0b2aca8b
-
SHA512
6f166babd95d45c94966af2da552d8ac6d7ce22dede1a6ea988b1ecfa6d1b1561e08b92518248a1c6b015b600b1aa31fe82c0ea638cea1660d823dc3d1f7b73c
-
SSDEEP
12288:Y3XQWfR2Wom3V8e6xgD/gNywO/j9xSzFMwfh8izxd0TlHE:YxFdl6qD/3wcOzjp8izxdolHE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/3fd3f37912e5aa23fceb3877d6ee43c8b102410d4fc90b147aab266972939b07
Files
-
0a7a5f4a91ffb0759dd7e1fe9ddfe419c96e4d881060fc93968f92dd0b2aca8b.zip
Password: infected
-
3fd3f37912e5aa23fceb3877d6ee43c8b102410d4fc90b147aab266972939b07.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 507KB - Virtual size: 507KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 186KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ