Static task
static1
Behavioral task
behavioral1
Sample
83d9788dddfef0809379d87976f80887d0e4718ca6b1529d88058efcae5f3a02.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
83d9788dddfef0809379d87976f80887d0e4718ca6b1529d88058efcae5f3a02.exe
Resource
win10v2004-20230220-en
General
-
Target
043bc8ab5c7cb681e812648f3b6727cf.bin
-
Size
1.2MB
-
MD5
59848328d088c668295480bfed62beb0
-
SHA1
f4c044afda107a598e875d142057c3f5a81a2f27
-
SHA256
c780159c55f8aa8c7fa39028d667ba642a50dd1e60b11caab0b62a81a30045f0
-
SHA512
53bafbbe0c23d1196e349a083c9428f6e83f6e284aae535b2613d3b62444f7ea615d3293c382254649b0be5cca7637c1198078ae3c062fe419515fdd8504965b
-
SSDEEP
24576:vY7Gp4/EXNA+XE7/DfwyB21jVJsDd1Mwf6WzmPENkbz9krBYD4J:A7+4CXU3fdmjVI+w4PEuzGrBRJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/83d9788dddfef0809379d87976f80887d0e4718ca6b1529d88058efcae5f3a02.exe
Files
-
043bc8ab5c7cb681e812648f3b6727cf.bin.zip
Password: infected
-
83d9788dddfef0809379d87976f80887d0e4718ca6b1529d88058efcae5f3a02.exe.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 865KB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 43KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 70KB - Virtual size: 8.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 198KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE