Static task
static1
Behavioral task
behavioral1
Sample
a888f1a58c8c2ab3a2ae32743d0362fe01f145e76b4196c21b9c2bafc978e7fb.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
a888f1a58c8c2ab3a2ae32743d0362fe01f145e76b4196c21b9c2bafc978e7fb.exe
Resource
win10v2004-20241007-en
General
-
Target
c6363352dbd9a9f85ed71a7cb80212b8a98a9d6fe47b0f6fe7fa923a9624aea9
-
Size
691KB
-
MD5
6525acadcb786f4880a28db2d1b956e2
-
SHA1
b2a112cc99e9c792f29f53bbbdb079a3d50652c9
-
SHA256
c6363352dbd9a9f85ed71a7cb80212b8a98a9d6fe47b0f6fe7fa923a9624aea9
-
SHA512
b9f67bd840431f6e961b23b9738c3f5163832344d10d92c8cfedae52e3122e6b29d36cdc08ed38813e2d35481a92507e03a405a738a83fe7fc0d063a0d03a3e8
-
SSDEEP
12288:NeDjzdXlXcZG5hQQPzH6L0Ndj+TjBw+0Akzlznv7lGU4HBgrF:UPBXldQmH6YPj89kzlzod25
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a888f1a58c8c2ab3a2ae32743d0362fe01f145e76b4196c21b9c2bafc978e7fb.exe
Files
-
c6363352dbd9a9f85ed71a7cb80212b8a98a9d6fe47b0f6fe7fa923a9624aea9.zip
Password: infected
-
a888f1a58c8c2ab3a2ae32743d0362fe01f145e76b4196c21b9c2bafc978e7fb.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 857KB - Virtual size: 856KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ