Static task
static1
Behavioral task
behavioral1
Sample
4c9b551910643eb2c5a4adaf517f41cf1c5035c1526b11f108accd970e675e31.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
4c9b551910643eb2c5a4adaf517f41cf1c5035c1526b11f108accd970e675e31.exe
Resource
win10v2004-20230220-en
General
-
Target
8c17a25c10a84fff8ce793a00aa758db.bin
-
Size
24KB
-
MD5
75225bb170d9230208fde7c10dcfe906
-
SHA1
b8952285b78628ea341a22d132284bdad66aad3f
-
SHA256
8d2c50fdec9296c413460371d6a12ae03a7ec1bdee73b382a0980a9d74f73531
-
SHA512
1ddf094ade72e069029a9aaac99da7badb0848ca353fdda9efdc67ba653c534e762ed2aa42faf55ddc24272f0bb27af5dc4d999bba1d03eebba27a2cf31a68ad
-
SSDEEP
384:dOyRa4psNh1/zbON2VtB9Bza+NZRHC12nia716LUbRQCweqtnas7Nn/e+5WWiF6A:dOQaM21fu4Brt3HLl7QWWCYlZxzS6A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/4c9b551910643eb2c5a4adaf517f41cf1c5035c1526b11f108accd970e675e31.exe
Files
-
8c17a25c10a84fff8ce793a00aa758db.bin.zip
Password: infected
-
4c9b551910643eb2c5a4adaf517f41cf1c5035c1526b11f108accd970e675e31.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ