Static task
static1
Behavioral task
behavioral1
Sample
dc94a603e996002fac39bcff717525d3d442ccaf78ab97be26b588275e8f2a4d.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
dc94a603e996002fac39bcff717525d3d442ccaf78ab97be26b588275e8f2a4d.exe
Resource
win10v2004-20230220-en
General
-
Target
974385631874e63055137f1b0e441eb6.bin
-
Size
198KB
-
MD5
80d8a4b1eafaad3bf27521f4f1386065
-
SHA1
a027a579a3ef5013541bd746a2306a8d1eaaf1e3
-
SHA256
444ae89434fe73c0df5a8389d4f56986ea15a8eefb44bdffedb5d91c7833b4e9
-
SHA512
918d052b8d418774442efceebff6ac0165fa5f40f7e228eedfb3f383a3995216b63bad7543f672b576768d202ca626207476088750a2257ac90a094cbee463b7
-
SSDEEP
6144:NTE7JGPSWXViw477sCGWesnIW7GAeGVZY:hE+SWXViw4vVmsZe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/dc94a603e996002fac39bcff717525d3d442ccaf78ab97be26b588275e8f2a4d.exe
Files
-
974385631874e63055137f1b0e441eb6.bin.zip
Password: infected
-
dc94a603e996002fac39bcff717525d3d442ccaf78ab97be26b588275e8f2a4d.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 595KB - Virtual size: 594KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ