Static task
static1
Behavioral task
behavioral1
Sample
3bed8547e488c397699d515cd97c222b482c302f4ba17a70980db6f0788dc2fe.exe
Resource
win7-20241010-en
General
-
Target
2e9e849287f292db9064f54e6888184007170ca99e0b098f3d5a2c725d22fb25
-
Size
471KB
-
MD5
66ee24ac2a3a5eeab7a47e355d7aea55
-
SHA1
3fcc3407d84b5264c0103ef2074f6e885f87cbae
-
SHA256
2e9e849287f292db9064f54e6888184007170ca99e0b098f3d5a2c725d22fb25
-
SHA512
644602523ee224b3eb5bf97d4f4fe9a5fd5fb9d0797fd14ecd31abeacd0208e9ba4db4741c394fd92357927baaba8c3301fb96835cbbf0964e0449a03c926122
-
SSDEEP
12288:pQwKrrms1qL2VsYI0Mwr6VwKy+ZC9RblhZeRToX1eb8lFG2:CrrmsAL2VsOMwr6q+ZWbHZeJokb8lFG2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/3bed8547e488c397699d515cd97c222b482c302f4ba17a70980db6f0788dc2fe.bin
Files
-
2e9e849287f292db9064f54e6888184007170ca99e0b098f3d5a2c725d22fb25.zip
Password: infected
-
3bed8547e488c397699d515cd97c222b482c302f4ba17a70980db6f0788dc2fe.bin.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 514KB - Virtual size: 513KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ