Static task
static1
Behavioral task
behavioral1
Sample
TALIMAT23-01085 -05062023-DOC.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
TALIMAT23-01085 -05062023-DOC.exe
Resource
win10v2004-20230220-en
General
-
Target
TALIMAT23-01085 -05062023-DOC.7z
-
Size
213KB
-
MD5
24eb8a3e75875a347d2e16d424297063
-
SHA1
11256b24c5166c25f59ec914eb0a98bef8995daa
-
SHA256
70657b94ab74e764632c25b864445ce46f5f6fd952ce7ec43c898d422ac6cd5a
-
SHA512
11e13dbe48ac32ab7e35d31ff547a464bed292e4cc8368a2610dded7bd7b4b08985bf770a6bbcfc6bfa3db51e6b9a8ed71c820ae9341d8651aaa0978c904c124
-
SSDEEP
3072:Yo4bRMqXT7ywVJcIhEGaPwTK+RBx8n878p+yCuGd1AqeNm3CN9uht7xk0PMIGu+L:YRRT7ywVi3GewO+iFoy/Du7GV0ztq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/TALIMAT23-01085 -05062023-DOC.exe
Files
-
TALIMAT23-01085 -05062023-DOC.7z.7z
-
TALIMAT23-01085 -05062023-DOC.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 369KB - Virtual size: 369KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ