Static task
static1
Behavioral task
behavioral1
Sample
6439c8e94bd2398ad15bd8cbf86a9ca9528cecf77506357e894a359880282724.exe
Resource
win7-20240903-en
General
-
Target
6439c8e94bd2398ad15bd8cbf86a9ca9528cecf77506357e894a359880282724.zip
-
Size
682KB
-
MD5
d1eecd2806c29ebacc098fd78bf7b300
-
SHA1
5ccc3635cd71fdefe15995a6bc9393d134db3bcc
-
SHA256
a7b7a45fb182082977ca1f787d6df9e3641f7d0b82bd81a787f94db9745a3fe7
-
SHA512
d8e022f69cf4d5dcb89a9ffcd5071512eda3b956f6a47833872c5f4aa366595b28e41ec080c42c64414346564fdbe0a8ee0bff0cf719dc1090af2f0d06e83bbd
-
SSDEEP
12288:51/n6NuH332baWZgqXhHF4AVmWS8Kd1Slz5U674u95TUJYMQQ8XhaW0tr1ONPc6:D/nUuH3QR7XZMH5d1SlzWW9PAJYMUxaw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/6439c8e94bd2398ad15bd8cbf86a9ca9528cecf77506357e894a359880282724.exe
Files
-
6439c8e94bd2398ad15bd8cbf86a9ca9528cecf77506357e894a359880282724.zip.zip
Password: infected
-
6439c8e94bd2398ad15bd8cbf86a9ca9528cecf77506357e894a359880282724.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 739KB - Virtual size: 738KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ