Static task
static1
Behavioral task
behavioral1
Sample
18d4850a10812f3b4d8631939d469b41c1d344a7fa9205acc31b265d0600291b.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
18d4850a10812f3b4d8631939d469b41c1d344a7fa9205acc31b265d0600291b.exe
Resource
win10v2004-20230220-en
General
-
Target
daf761fb9aaa34a9c2120003694d88a3.bin
-
Size
14KB
-
MD5
c45802af0bfab17c1a190e5f3779dffe
-
SHA1
0767e38d797cc91c1f340666b3a093b3e2806438
-
SHA256
31fd845f997c38c66932285765e21530e6df360679ac8efd25345c36d202c23b
-
SHA512
7978c64f4eda89387407735d4f4763b091c638c1e592374bd9b18149fb0ea3b558fd4582f02028c98da03a0fa1d475332e0425b9ea89f3e08a0593324c9ed15b
-
SSDEEP
384:hVYpCqX0JUkBKpRx9TPpXCRoySaEBf4MvG4i:34XLkBKTx9TxpySt94Gi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/18d4850a10812f3b4d8631939d469b41c1d344a7fa9205acc31b265d0600291b.exe
Files
-
daf761fb9aaa34a9c2120003694d88a3.bin.zip
Password: infected
-
18d4850a10812f3b4d8631939d469b41c1d344a7fa9205acc31b265d0600291b.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ