Static task
static1
Behavioral task
behavioral1
Sample
06062023_648.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
06062023_648.exe
Resource
win10v2004-20230221-en
General
-
Target
06062023_648.7z
-
Size
9KB
-
MD5
83735591195b877481eda11e9d9952e2
-
SHA1
4adec56eab19f97405b7f5aef43640e750494c5e
-
SHA256
a4d20b334ed6ca9107b7dcb397bb8411bf13b6fa0021305a358415f8ffe83015
-
SHA512
869130b16775750043534e3a94e5dc5945375ead932386c66be67690a9f83ebf4e259e858ca2b28d0b7605215c3138a00e27b57f99c9e7a1692d375cdd3e0db2
-
SSDEEP
192:2IKwrHrrqMi5uC9Xcpmga9pWkq1KJ41d6ABIf:myH/qMoBcpa9pWzz1ju
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/06062023_648.exe
Files
-
06062023_648.7z.7z
-
06062023_648.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ