Static task
static1
Behavioral task
behavioral1
Sample
8685d354c551261d36d207ddc6dae473826a45b293e00244403a252f1d6059e5.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
8685d354c551261d36d207ddc6dae473826a45b293e00244403a252f1d6059e5.exe
Resource
win10v2004-20230220-en
General
-
Target
491b72ce80b8c99d044d8a077b853616.bin
-
Size
5KB
-
MD5
db812d0db3332a7b2e91dd7a90cd0108
-
SHA1
4753d59a9e44e627787869cbbf6116bcbec66939
-
SHA256
eb50a8f3dd89180a5e1c699b223c8a8fdc6b7a82855e7c7a382baac9a37d8226
-
SHA512
5d5ebcdd0f182e737fbef07a1dd87b44b673e1737826a4fe65312925fb699a6aae2685f5433ab3d0b291972955c94f2c600434a02fbf2d83bdb7a83e9c8cf186
-
SSDEEP
96:3l1tFGM7TG5qVwBsbVYlfDNxQZXyiBt5TavQTB2l3wpTKNMVeI8rHVaum10/PWlL:3HGUid+byl3FW1aYTB2lcKNU65G1EPWp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8685d354c551261d36d207ddc6dae473826a45b293e00244403a252f1d6059e5.exe
Files
-
491b72ce80b8c99d044d8a077b853616.bin.zip
Password: infected
-
8685d354c551261d36d207ddc6dae473826a45b293e00244403a252f1d6059e5.exe.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE