Static task
static1
Behavioral task
behavioral1
Sample
fa3134268a65319c4c91a303c5f69243e1d910bfe73d592e24a2727804b79e82.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
fa3134268a65319c4c91a303c5f69243e1d910bfe73d592e24a2727804b79e82.exe
Resource
win10v2004-20230703-en
General
-
Target
4be34f49e879ef731eee3b8f4f2217e9.bin
-
Size
122KB
-
MD5
42070cd72a25938155de355841f37bf5
-
SHA1
cdf5ddae4b4e3842699c8f5e8057c4c71030714d
-
SHA256
fb03beb6653e9fdd4d8e06fa490b92d362a3f7df19cad65fe5eee2d7bef8ef57
-
SHA512
dbd4474915cbd9f17d127a511a6340b5f3969c24d5e2c52247ed7a0593ff1b22f32680d390aa29b581a6350f6fd366d73342e32b0130a9db9663ef3980d1581f
-
SSDEEP
3072:1TVdVvhb9npDr/9EOWaACkHOXFkAtFuXyMsN3AuojaOnTAWVY7c:1PV19npDr1szfwkcui/N3AuoOoVJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/fa3134268a65319c4c91a303c5f69243e1d910bfe73d592e24a2727804b79e82.bin
Files
-
4be34f49e879ef731eee3b8f4f2217e9.bin.zip
Password: infected
-
fa3134268a65319c4c91a303c5f69243e1d910bfe73d592e24a2727804b79e82.bin.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 185KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE