Static task
static1
Behavioral task
behavioral1
Sample
eacf6ec6fcdcb67ed4c3549076316673490d319b0a9af6278fd634631f015016.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
eacf6ec6fcdcb67ed4c3549076316673490d319b0a9af6278fd634631f015016.exe
Resource
win10v2004-20230220-en
General
-
Target
3aebe103cbc1675b55cbb4fcddcda03b.bin
-
Size
30KB
-
MD5
7f76df5a678d12e3a866b7894944e859
-
SHA1
7c868a6e359309284d4ba3a9cb9c92d8a50dd678
-
SHA256
476ec8c5b727026ef72488f443e62784316272dd909a35b8000af7d5910bb913
-
SHA512
785b6e088a5ccc7e14fdef3f411f8d5e727fd1bbcfced736628078f76329a2383692b3d4cf05eb6a5dea6a5c332bb3b6dfab630e26c6f937bb9f84ecacb4a592
-
SSDEEP
768:D1BZNQkqVkK3GAflMafZs5O2Gu5WQDgLzmZN+lkGtBB5a1w5Gks:DIkQ3Lf6MZd2e6ix1PmL9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/eacf6ec6fcdcb67ed4c3549076316673490d319b0a9af6278fd634631f015016.exe
Files
-
3aebe103cbc1675b55cbb4fcddcda03b.bin.zip
Password: infected
-
eacf6ec6fcdcb67ed4c3549076316673490d319b0a9af6278fd634631f015016.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ