Static task
static1
Behavioral task
behavioral1
Sample
c0bb580c3dde7904d5d5153e20e7bc81c34b7c3bf120aa8ffb7bf1f87753dfff.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
c0bb580c3dde7904d5d5153e20e7bc81c34b7c3bf120aa8ffb7bf1f87753dfff.exe
Resource
win10v2004-20230220-en
General
-
Target
d39050a4b6ef3f4aaa5808d30501d4fd.bin
-
Size
10KB
-
MD5
49dfba141aec2d95d6344a10aaf80133
-
SHA1
f634fb2e3ba0db1a3e93948ca90cbfd017ce13c2
-
SHA256
49eb22397db317c547172f2c72efb21dc49d0985bb7d550fa443da17b91fe6ea
-
SHA512
f4e2c4ec6105d16cff149c995f40683d43ce1c4ed3dca7f2379c7faa35788b6cc9d2e793645c95100b8a65e0e4c3b5c078e1583eddc75e4c781557a56b09cbc0
-
SSDEEP
192:4gHOGs2DOwwMRwKft9nTNNrr0JG3xkZWuO9OSlHAdrZg9vVEoWLt1tEu:4muwtiK1zN30JSJhMbrZgxVy9Eu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/c0bb580c3dde7904d5d5153e20e7bc81c34b7c3bf120aa8ffb7bf1f87753dfff.exe
Files
-
d39050a4b6ef3f4aaa5808d30501d4fd.bin.zip
Password: infected
-
c0bb580c3dde7904d5d5153e20e7bc81c34b7c3bf120aa8ffb7bf1f87753dfff.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ