Static task
static1
Behavioral task
behavioral1
Sample
6f95ab99f175c18ddac4b83a164fa7b4caf500c066cd5f486837d39a80f41ac3.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
6f95ab99f175c18ddac4b83a164fa7b4caf500c066cd5f486837d39a80f41ac3.exe
Resource
win10v2004-20230220-en
General
-
Target
c44087705a82fdd12fd87fa6e69578df.bin
-
Size
11KB
-
MD5
6f7b5dbafe361526c9a7e09ea9f35160
-
SHA1
1071d983174bcdd7973b70641e3d5be7687769a9
-
SHA256
633e6f55d769cdaac0c3873bfe0673e0eeeb456c959ffbbe538596de1de5a5b6
-
SHA512
3f907edc4073edf043d6461754b666d1dd42b89338d582a8059c587506f1684dd9cee88fc39609c55396ce0580b9d6114165457f504066746d45fc8f70fc8ce4
-
SSDEEP
192:vQ0h7e43lcCaCXTL6DPUj9B4wAKrweYy6x32nlToUo7qF+XhwSK1A7+Vqr9EM4vl:vQCK432CbDL6LyB6/e1g3qTPoqr3VDMg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/6f95ab99f175c18ddac4b83a164fa7b4caf500c066cd5f486837d39a80f41ac3.exe
Files
-
c44087705a82fdd12fd87fa6e69578df.bin.zip
Password: infected
-
6f95ab99f175c18ddac4b83a164fa7b4caf500c066cd5f486837d39a80f41ac3.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ