Static task
static1
Behavioral task
behavioral1
Sample
6b72122e4d6c5fcfd559bf2a728e3531f16e84090482b5a0004ba5c160e5b73e.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
6b72122e4d6c5fcfd559bf2a728e3531f16e84090482b5a0004ba5c160e5b73e.exe
Resource
win10v2004-20230703-en
General
-
Target
c7babc96c4a023ff29675aa49b6159a0.bin
-
Size
759KB
-
MD5
78c5ba58abd7ed2cba8cc94a707cec17
-
SHA1
108527d0664e47d49621b21eea15b2bceed92234
-
SHA256
e9dd8f12565646357bd0401adce5e0099c57d4a5660e7c2f19ef681ae05ec2e3
-
SHA512
727d19db549339f53d76fcf507dce5d649ff19a48d9a569cccfa4c8c44bfce2bb1242ec65b4f7716aa8011a86c49f09179a842c2298beda4f0ab2bfacafa8f22
-
SSDEEP
12288:NzOiHdZ6w2LTYIKZdeyAQ+nxx8MCkCwUeM10jm7+xsKysLx20CtujLBw0NpctnlK:NlnATn3nxxVCkj+qjmCsKyuxQtujLm0N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/6b72122e4d6c5fcfd559bf2a728e3531f16e84090482b5a0004ba5c160e5b73e.exe
Files
-
c7babc96c4a023ff29675aa49b6159a0.bin.zip
Password: infected
-
6b72122e4d6c5fcfd559bf2a728e3531f16e84090482b5a0004ba5c160e5b73e.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 802KB - Virtual size: 801KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ