Static task
static1
Behavioral task
behavioral1
Sample
2bd44c7eb0536845a0fa4ec54eaf49c47120c154d5d29ff167c312adc94a60b2.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2bd44c7eb0536845a0fa4ec54eaf49c47120c154d5d29ff167c312adc94a60b2.exe
Resource
win10v2004-20230220-en
General
-
Target
c447c561925b77d52242def762ee394b.bin
-
Size
675KB
-
MD5
2209f4636bafb159915ded6c9e1e35a4
-
SHA1
980e926004d6d864fca25d8eaad489422d4a9769
-
SHA256
637dfb331206d60fd64e3cf1530e09b6a0b5130efc47f59c519bc12367e91574
-
SHA512
0732b1702cd6345edd289b7de8a0e86aacf4d9f1061b4ab1b36d68c4af5487a169566745bd23f808ac9d50e35272f9380e02cd6e80bb00b04314b07caacd86ce
-
SSDEEP
12288:QKYeSVJU18q50ckTxNijoInaf1dP3X8FvtvnJAqJG5W5Myg5QCDX:TAVRHTsoWKDP3X8FdaqZqyKvDX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2bd44c7eb0536845a0fa4ec54eaf49c47120c154d5d29ff167c312adc94a60b2.exe
Files
-
c447c561925b77d52242def762ee394b.bin.zip
Password: infected
-
2bd44c7eb0536845a0fa4ec54eaf49c47120c154d5d29ff167c312adc94a60b2.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ