Static task
static1
Behavioral task
behavioral1
Sample
06453105c0c0b1f09b66c08106db9121c09989da309d151ed7342dc7bcab62c6.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
06453105c0c0b1f09b66c08106db9121c09989da309d151ed7342dc7bcab62c6.exe
Resource
win10v2004-20230220-en
General
-
Target
1398a4342735cbe1a5cf5e40641c1a2d.bin
-
Size
181KB
-
MD5
eefdce9bac708bf6307463afce47e38e
-
SHA1
d33e8409f25ccf0d560e5017fa9c968daa84805a
-
SHA256
7c296e2e483c45701b21c127cd91d2755b6e5483ecbd70d4595a671a87226e58
-
SHA512
7bf9e446520d4258403cc6180b8a539fc5bfccb969386a6c811d2155df7b25e44c2953dc94805e279896f74a5a67f4895f67cec2e0d0247371394bff84ff9b21
-
SSDEEP
3072:P0S08Dkthi0+wXx2fgVJ4X6vHq/CR6s3ieJbEV7oDl0HJX/1ugo7JFW+0k1uehwY:sSLD+40RXx4gPvHMc33EBrpPIgeXnwGr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/06453105c0c0b1f09b66c08106db9121c09989da309d151ed7342dc7bcab62c6.exe
Files
-
1398a4342735cbe1a5cf5e40641c1a2d.bin.zip
Password: infected
-
06453105c0c0b1f09b66c08106db9121c09989da309d151ed7342dc7bcab62c6.exe.exe windows x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 182KB - Virtual size: 181KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ