Static task
static1
Behavioral task
behavioral1
Sample
DOCX_Rad_2023057_16294881327.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
DOCX_Rad_2023057_16294881327.exe
Resource
win10v2004-20230221-en
General
-
Target
DOCX_Rad_2023057_16294881327.tar
-
Size
1.5MB
-
MD5
9575111f553ae4a701e567d525ad32a1
-
SHA1
0e8aa29d4aa0d1e1f0e6f4fbae194989d9341881
-
SHA256
c1b003eef17b3968225fead029eb7a9bcb15e5b067079c274723e67bc2acdada
-
SHA512
503fb6ba1fd2058a9624d098db0e6fe65551650309d19348b9e9e8d823edc874a573dece1d681d5a54d9d0b17708f8042356d2d64ef9a235ec0147622cd31ea3
-
SSDEEP
49152:AubC3AzjxJwaB8AzJZ4+Twi4CtBVGBOGv3Dic+GVj:dtJwaTJevi5WBOGveat
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/DOCX_Rad_2023057_16294881327.exe
Files
-
DOCX_Rad_2023057_16294881327.tar.rar
-
DOCX_Rad_2023057_16294881327.exe.exe windows x64
Password: 5120
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 529KB - Virtual size: 529KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ