Static task
static1
Behavioral task
behavioral1
Sample
Machineliste.exe
Resource
win7-20240903-en
General
-
Target
cfbd31c637b07ad4eb5dacd7def13210fd67cd05c112d7094f888e6508c8b88a
-
Size
1.0MB
-
MD5
14df1e424aa234dd2deb2e2557d4b0cb
-
SHA1
03e5f1977ef0fbe6ed54ea62eb9ba075fcf3f273
-
SHA256
cfbd31c637b07ad4eb5dacd7def13210fd67cd05c112d7094f888e6508c8b88a
-
SHA512
7270241ee263d1d366119bdad0ef07d4e41dde83cbd16a0725040c64b9a22c61e1a5d4a56f4da18184b615985a340251696e95cdea819b578d86f2565db124fc
-
SSDEEP
24576:2XUlEy8shmc2M1ZY6apy/Gpts7+D/bkeNK7ZDVObtVN:2Xst8skMI6j/GptY+f0583
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack003/Machineliste.exe
Files
-
cfbd31c637b07ad4eb5dacd7def13210fd67cd05c112d7094f888e6508c8b88a.zip
Password: infected
-
54deb2b7beb1ed6377f14324d931708d0005d620281582562f7258306effcc59.iso
-
out.iso.iso
-
Machineliste.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 212KB - Virtual size: 211KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ