Static task
static1
Behavioral task
behavioral1
Sample
cc8274c502770613afec17ed1814e4b49c341984c87c9ca4fc536c6a6a965acf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
cc8274c502770613afec17ed1814e4b49c341984c87c9ca4fc536c6a6a965acf.exe
Resource
win10v2004-20230220-en
General
-
Target
12b7825e2c9b53b29f6c502fdd518b89.bin
-
Size
200KB
-
MD5
8f8534a79b4b7baa5b394f7942354761
-
SHA1
9b6a8bc653755633e1b6be7477fc8e89e5190119
-
SHA256
3c7044484b1258251f97ee912569a9244d54ebc72e87ad11665a919436b5c6ee
-
SHA512
7575cfd80d1f7c01d5c6fb4705346a89492be81cf7c27420f371ebe5964ad2bc4b916c51cc97e112e3c32b5dfc31b9f812102508173ef4df1d91f7b21b9ce470
-
SSDEEP
6144:w7VfnH43wSQO+H/SHQL2Yxwrv3MSIZu5zIurC7Gf:uVvx/SwLjmz37IZizrmGf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/cc8274c502770613afec17ed1814e4b49c341984c87c9ca4fc536c6a6a965acf.exe
Files
-
12b7825e2c9b53b29f6c502fdd518b89.bin.zip
Password: infected
-
cc8274c502770613afec17ed1814e4b49c341984c87c9ca4fc536c6a6a965acf.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 174KB - Virtual size: 174KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ