Static task
static1
Behavioral task
behavioral1
Sample
T-974.exe
Resource
win10v2004-20230221-en
General
-
Target
T-974.zip
-
Size
1.6MB
-
MD5
96e6cb96fcac1e6f98df6dd6c15fb46d
-
SHA1
eee7e8578165a59f9b79316968dab0332dd10170
-
SHA256
6d621ff192fb75534e5494da4f332be9cca31d110463291d127855b3c202e7c5
-
SHA512
55c7d9574b97bedcdd1d71464e3b438174444b3730d14aeb971bdf5897461f592ee7b66c612e76d2fe302efb3837df6f611b082130b0c7a50112a21eceb1bbae
-
SSDEEP
24576:YBgUtoLhvFd9Y7EHQCNe6lnMsbKChxB4cTlmzO5AldWDRL1lsFM6SA6zQYIiDeUd:qmFvndvnZKyRBmGAldWDRpGMJPWLtMeY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/T-974.exe
Files
-
T-974.zip.zip
Password: infected
-
T-974.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 20.5MB - Virtual size: 20.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ