Static task
static1
Behavioral task
behavioral1
Sample
AR_82852_4.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
AR_82852_4.exe
Resource
win10v2004-20230621-en
General
-
Target
AR_82852_4.iso
-
Size
398KB
-
MD5
05de1acb7879f3e4d19dede4262b7fe9
-
SHA1
80080e06908bef8aee64d862c7c45bf11834ffe9
-
SHA256
c6adefff18d5094e048b24753f9571185e18a9026e1881f7753565c18073ba20
-
SHA512
b8be1c1ff432f20591f36f3838a72c8497ce6e595ddf5f86b5bfe45fbae158f01677c87d358b8daaca22a7f69441f45e04f3717956add3cfdee99aa9fe75bf4d
-
SSDEEP
6144:CIK/H8pxWo3YHc4er3Ue6+yrEZ4eHEZ4e:ROLczM/s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/AR_82852_4.exe
Files
-
AR_82852_4.iso.iso
-
AR_82852_4.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ