Static task
static1
Behavioral task
behavioral1
Sample
8101d65f0f12946bd742b2b7513075ea485e3134258032252bef1938ac3cd3cd.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
8101d65f0f12946bd742b2b7513075ea485e3134258032252bef1938ac3cd3cd.exe
Resource
win10v2004-20230703-en
General
-
Target
4ac62a3dcf99f0ba33d2b4bd1bb70663.bin
-
Size
32KB
-
MD5
bb4a8081ebb81fb8e78c942527ce8fe6
-
SHA1
bc75398cbef8046cbc54ef4877adfa8bf5ee5d00
-
SHA256
89bb1a5228d7aaec5183faff435ab377280457f8d412287c01980e02ce906ff6
-
SHA512
f0a86f904b6d46df5457149360a3ac4735aa518a095885480139a70edb9bc91f078e20a5c98d91f0993161a99273aa1b055e9d9c079aa55c06052eb071491304
-
SSDEEP
768:/rt+kS9iuiPRQyrTZ/Oh+CG2CD2Vp713xUnn7fap8x099oyl:jte9om0TZ/Oh+XCVpV6FAqyl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8101d65f0f12946bd742b2b7513075ea485e3134258032252bef1938ac3cd3cd.exe
Files
-
4ac62a3dcf99f0ba33d2b4bd1bb70663.bin.zip
Password: infected
-
8101d65f0f12946bd742b2b7513075ea485e3134258032252bef1938ac3cd3cd.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ