Static task
static1
Behavioral task
behavioral1
Sample
746f5d251c0d3883fd7a4d5775acdf6c12417f1365fc9db57a549f528ccd91dc.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
746f5d251c0d3883fd7a4d5775acdf6c12417f1365fc9db57a549f528ccd91dc.exe
Resource
win10v2004-20230621-en
General
-
Target
bfabce83cee13bb8b8d72f5c38e2af65.bin
-
Size
647KB
-
MD5
ca0fddad5a4154ea7eee7c828c8b2b9f
-
SHA1
6b21789dae50c274e0fe244497a506db0d06bcef
-
SHA256
25e4db55f55f431d055131075463db6c50e821c7666a58f2556e2bec0cc1bf19
-
SHA512
9041f99529251ea92cf7910ded2e456a93e79cf64e941ecd697c469dc307a4e40b0e50b8c5b676059f2580c00d6f89bfe85dbc627fa3af9cc62ec54542b2b09e
-
SSDEEP
12288:bc/81kok2iJaXSLfiR5++T+qchOYxFfsllEzT5//1NDLA8Y/4KBrDa:bc/5oViiSLm7T+6vlcDKHBva
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/746f5d251c0d3883fd7a4d5775acdf6c12417f1365fc9db57a549f528ccd91dc.exe
Files
-
bfabce83cee13bb8b8d72f5c38e2af65.bin.zip
Password: infected
-
746f5d251c0d3883fd7a4d5775acdf6c12417f1365fc9db57a549f528ccd91dc.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 737KB - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ