Static task
static1
Behavioral task
behavioral1
Sample
8080f28eb2c4e6406a8df0f3ed8c1f42f8bb038a35398e13d29c618ade13d06e.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
8080f28eb2c4e6406a8df0f3ed8c1f42f8bb038a35398e13d29c618ade13d06e.exe
Resource
win10v2004-20230220-en
General
-
Target
64611ca692664bc54b040e4b01c38ff4.bin
-
Size
106KB
-
MD5
ce63653b88e465ce7994685ae3576204
-
SHA1
c4cd59c113fda763afd4d028dc8e1a54ac63e0ac
-
SHA256
e3154c333a12af252dee9b4c23cf76df0cd7d1d7b978bc0ff23f7da9708fd93f
-
SHA512
773d4f7cd2b00e63ff89d30c1e5693711ba9915a1ab76c781fd83ccaf35ae03bffe32bbb165de35761672330ac62a7901ac371273b75cbd547c32763e3699e07
-
SSDEEP
3072:7gEvUvHuN8cOdbnLdV7o+kBVg48JJZYzF:7HgHs4dxoVMJJZYzF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8080f28eb2c4e6406a8df0f3ed8c1f42f8bb038a35398e13d29c618ade13d06e.exe
Files
-
64611ca692664bc54b040e4b01c38ff4.bin.zip
Password: infected
-
8080f28eb2c4e6406a8df0f3ed8c1f42f8bb038a35398e13d29c618ade13d06e.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 399KB - Virtual size: 398KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ