Static task
static1
Behavioral task
behavioral1
Sample
1f615d78b355710026465136efbc424c3ce9d3726acb7f0a6be2fcfdf755d13e.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1f615d78b355710026465136efbc424c3ce9d3726acb7f0a6be2fcfdf755d13e.exe
Resource
win10v2004-20230220-en
General
-
Target
76aba677b9ce27bb4f85679c7cf8cbf8.bin
-
Size
20KB
-
MD5
f0d13a2270cbccc36a7af0c335dbe953
-
SHA1
4d302c666cc0c0684b4cd830126cd48bf4506618
-
SHA256
cfd56330f4af181e0a72a4641520f119b40bc8aba38c8f256b6d7a023b84c013
-
SHA512
8f967f2a35e8bed13c778666b6d16a1fde2463ee43d2ef6252142e3df15d783566d8eed4307727bd0790d7355a832258b88a902c18d948443e84f97d722850c5
-
SSDEEP
384:NzloDB3rBuYebXlIISMKEQ2UEg9f3cg6zsfBTYOfgvsPmUEEL:NzWtbgVHSMLR+6+tjYvGoE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/1f615d78b355710026465136efbc424c3ce9d3726acb7f0a6be2fcfdf755d13e.exe
Files
-
76aba677b9ce27bb4f85679c7cf8cbf8.bin.zip
Password: infected
-
1f615d78b355710026465136efbc424c3ce9d3726acb7f0a6be2fcfdf755d13e.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ