Static task
static1
Behavioral task
behavioral1
Sample
1cd1f7fff33ed742cd3e44b5db696c9081f0452405f2ab33850e0a953e1e5f0e.exe
Resource
win7-20240903-en
General
-
Target
be6a2eb19719c11f1aac7a06fc5301df.bin
-
Size
692KB
-
MD5
ca505c1e8174998ac14a405aba012935
-
SHA1
d99af720a390118e8d99c11cb7bfacf37277368e
-
SHA256
dcb291059b9d48a686b4ae5d83f5c6438617d0e9fc24ba5031556f9284b4d90c
-
SHA512
e6d8c3bdfcf23daddca1c30bc09a9cff8e226b5d87fc7706a397ad56941303ed4c3d2f7b4b9e74321431f19a33420bddc9d122ab4004d58ba9810277023a01a3
-
SSDEEP
12288:Qs2LIZr7Eopwj9IzuYUa1OKhrCwZkYwXqK8AxgQZvE5TscheFAtuj06SBA0Ko:6LC7wjmYaMKFC/Xqs14sW+0fJZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/1cd1f7fff33ed742cd3e44b5db696c9081f0452405f2ab33850e0a953e1e5f0e.exe
Files
-
be6a2eb19719c11f1aac7a06fc5301df.bin.zip
Password: infected
-
1cd1f7fff33ed742cd3e44b5db696c9081f0452405f2ab33850e0a953e1e5f0e.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 908KB - Virtual size: 907KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ