Static task
static1
Behavioral task
behavioral1
Sample
0d7c9a2901ce64d1269d0729c543c2c95bfd11fd883e142259646337f6f666fc.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
0d7c9a2901ce64d1269d0729c543c2c95bfd11fd883e142259646337f6f666fc.exe
Resource
win10v2004-20230703-en
General
-
Target
0aa653e1785c76f37ac4cb12f18229ff.bin
-
Size
944KB
-
MD5
5dce2aeed2ce5bf6a75d898b2ded5455
-
SHA1
2f90e8a9e3ece6368c3aec8a982eb055445647d2
-
SHA256
e6ce393dda3122ce3df4467c5a01d17312a59b0769afaf8e4e26842bd657eeb5
-
SHA512
7598456aa3bbb391911f1c047f86ae23e3588d381cf3929ed6f1b3fcb4eabacf05200e2619507bb5ffe2b1a707b3e5a9608a9fdf13a0fa42333fcade782da7ba
-
SSDEEP
24576:/yoNnAes0gLyRlXP1AJNZ8esvTjf1HebedjJ0v9C:/yoNnAb01lXP1APZtsbJ+ejeI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/0d7c9a2901ce64d1269d0729c543c2c95bfd11fd883e142259646337f6f666fc.exe
Files
-
0aa653e1785c76f37ac4cb12f18229ff.bin.zip
Password: infected
-
0d7c9a2901ce64d1269d0729c543c2c95bfd11fd883e142259646337f6f666fc.exe.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1007KB - Virtual size: 1007KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE