Static task
static1
Behavioral task
behavioral1
Sample
fb2f32a74864309c7fa49bc5ded04863f3d9b72a1f907675a7ab8d2bb2bb081d.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
fb2f32a74864309c7fa49bc5ded04863f3d9b72a1f907675a7ab8d2bb2bb081d.exe
Resource
win10v2004-20230220-en
General
-
Target
4c2f4a87b5e76448b48b99ed4efcecb8.bin
-
Size
103KB
-
MD5
52e0e1b787485907deeee5f292e3e4e5
-
SHA1
a612b2a76455a87174bb978ed3af4983ecd75aeb
-
SHA256
5589a8c1e5499ab66ea90c8ed6f0c5907bc588e7dbc9c45efd842f33df2c188b
-
SHA512
4abc30f166285ad0e3b8bd2ed414a71c79c23d8ab3ee07b034b27c7ec47c667c409f052988749035a1bf1aa2ce7a28f9c14f8ac122cbb4941941aae439bbcdc3
-
SSDEEP
3072:9aVgiV1js0+Q4EvcvZcXx9cZXW467pY23p:9aCiv9+gvcvZs9z467SEp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/fb2f32a74864309c7fa49bc5ded04863f3d9b72a1f907675a7ab8d2bb2bb081d.exe
Files
-
4c2f4a87b5e76448b48b99ed4efcecb8.bin.zip
Password: infected
-
fb2f32a74864309c7fa49bc5ded04863f3d9b72a1f907675a7ab8d2bb2bb081d.exe.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ