Static task
static1
Behavioral task
behavioral1
Sample
b16d9a488d91cad20084d64c7cdcf356.zip
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b16d9a488d91cad20084d64c7cdcf356.zip
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
fbb8623e06fa0ae61b4c276c785fc262a4ae5c1a1709b17d63960d41c79e0dd6.exe
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
fbb8623e06fa0ae61b4c276c785fc262a4ae5c1a1709b17d63960d41c79e0dd6.exe
Resource
win10v2004-20230220-en
General
-
Target
b16d9a488d91cad20084d64c7cdcf356.bin
-
Size
17KB
-
MD5
3e8ff262662b0267d793ce8b74a2a97a
-
SHA1
cb2cc90b213318b20a6db85fa7b06a2ba1663648
-
SHA256
763c744e5563d6c5337f15963631cade18ff3baf53badbf6b6d060a6493fb494
-
SHA512
d62c8a01ad6310bc9e7d32c96a75c30676d602b7806a81669332d06fecfe78649434d73b14094f300af2f971cd89f0896d2ec6da9acc95cc16e1e173015d25cb
-
SSDEEP
384:2Ehcu41jA1PLBXmKvOx0hlKwQHYWaZjxvRAHuV3JsfCGT2:29uf1NJOx8le07COV3iZ2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/fbb8623e06fa0ae61b4c276c785fc262a4ae5c1a1709b17d63960d41c79e0dd6.exe
Files
-
b16d9a488d91cad20084d64c7cdcf356.bin.zip .ps1
Password: infected
-
fbb8623e06fa0ae61b4c276c785fc262a4ae5c1a1709b17d63960d41c79e0dd6.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ