Static task
static1
Behavioral task
behavioral1
Sample
28d5c9df59204c0fbceb051ff06d607327a718e6918696b5682dd124304dc9a1.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
28d5c9df59204c0fbceb051ff06d607327a718e6918696b5682dd124304dc9a1.exe
Resource
win10v2004-20230220-en
General
-
Target
bb58f5b04ac861d7c4bc610e711a5a62.bin
-
Size
201KB
-
MD5
ac70804a8f551bdf316e6c462c5da89c
-
SHA1
5dc7d710201d261ac5624df5b1138b078c745590
-
SHA256
cd92b64cbbb448ed0241e49769b67c3b332b73193069ef54f4e88180cbd4d4dd
-
SHA512
15cdc29c2646a1ac62df8c27fe659d9828e5f510a63d566c6392de403e8bacf95d5318acecdcd6372ab6743c912347ff568e1ddc59fe55cc18c71d1e8b21a81c
-
SSDEEP
3072:gd0ZqbnrA9Wa+kmX3t+u4Eb/JTAuaeBlM/OYWpQDnVyb+NDucP:g+MbnNaUt+z6AuaSlgOYDDnQb+BP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/28d5c9df59204c0fbceb051ff06d607327a718e6918696b5682dd124304dc9a1.exe
Files
-
bb58f5b04ac861d7c4bc610e711a5a62.bin.zip
Password: infected
-
28d5c9df59204c0fbceb051ff06d607327a718e6918696b5682dd124304dc9a1.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 273KB - Virtual size: 273KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ