Static task
static1
Behavioral task
behavioral1
Sample
265560df14513c5fdd9779cf5324c68d3f83e275223dd5d467a4dfbf714a3256.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
265560df14513c5fdd9779cf5324c68d3f83e275223dd5d467a4dfbf714a3256.exe
Resource
win10v2004-20230703-en
General
-
Target
7e47e3cf4a3b549238725b755190876e.bin
-
Size
9KB
-
MD5
a1c3bd0cdffd1ae60a3c1439bce21c3c
-
SHA1
38153b0b1567fe2e189c4e2f6ddbdf37d8f3b585
-
SHA256
c195e0feb3f44eada29aef33af2a11e56e2dbeacd1d3ad3e00224cbe5bb59d1b
-
SHA512
d851eae72e87ff8bc8fa4b69782f0bf6c987983a000c2a0fa4a2a1335fd67f208e63eeee5456e768d8913b4b90a9dbe6bd61b987f4e803e4a16b99ceffe2d473
-
SSDEEP
192:zgNU+sXaBC05omRVLo+cXZicfTV269mp8iZkPujUAdMK:UoiamRdoNXscfTV27p8MKXAOK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/265560df14513c5fdd9779cf5324c68d3f83e275223dd5d467a4dfbf714a3256.exe
Files
-
7e47e3cf4a3b549238725b755190876e.bin.zip
Password: infected
-
265560df14513c5fdd9779cf5324c68d3f83e275223dd5d467a4dfbf714a3256.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ