Static task
static1
Behavioral task
behavioral1
Sample
5f8b29e7c8f8bfa78b685c3a572b69dffbc52c0581b7872fe2166b2860a7ba19.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
5f8b29e7c8f8bfa78b685c3a572b69dffbc52c0581b7872fe2166b2860a7ba19.exe
Resource
win10v2004-20230221-en
General
-
Target
90f6964889e76843cf42c4284db3d245.bin
-
Size
207KB
-
MD5
19e30861fe3e89b2535acb639aab41a7
-
SHA1
f68e31338112b2e0ac0950f7a5738a7443653535
-
SHA256
1563535b9ff112a109cf48d44d548446928b5a779a65ce416c73d5eb75eba45b
-
SHA512
2803f01d12efb882140157a43e24a14af11a6a78cb67541e5e1a1a49078af1be21c63b70f383f2b83ac486e6a2a3973df561f4ddb0d0bc9a5273b15e2840c650
-
SSDEEP
3072:Oe2lecmqcvaYgist3X06e0R6tRWHKKnA22aizn6tPWdtij2S93lM4v6kXHJJmW3h:oeqyRgistUdXRq9neLn6YuvUOnp2hh8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/5f8b29e7c8f8bfa78b685c3a572b69dffbc52c0581b7872fe2166b2860a7ba19.exe
Files
-
90f6964889e76843cf42c4284db3d245.bin.zip
Password: infected
-
5f8b29e7c8f8bfa78b685c3a572b69dffbc52c0581b7872fe2166b2860a7ba19.exe.exe windows x64
Password: infected
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 198KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ