Static task
static1
Behavioral task
behavioral1
Sample
26d7222f388489a3b762386fe0e1b23a8904e2bc3f009054a4d874c957778000.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
26d7222f388489a3b762386fe0e1b23a8904e2bc3f009054a4d874c957778000.exe
Resource
win10v2004-20230703-en
General
-
Target
60052342b32beeb4a5c8245b2ea694f2.bin
-
Size
536KB
-
MD5
3dd6ccf5072390dba5f57ee46fd28a67
-
SHA1
1cadd09f705906649a158cab86f35423f8a8daf4
-
SHA256
669b8388018f7873a7955a5978e2086a8be0e5aa11b90dc94dee0c085ceb85a8
-
SHA512
38ededed5888bfaf6d40f544159e4ce74e56521fde18adb13ecec756494e0c65b4048a7fd25c9d83e8fad93ce8dc644f9a859cd127a5325f7a2c991bf931edef
-
SSDEEP
12288:9L5MpBFuuVsFU+18vCykYsLNf3VbAJSgm84X75t0gK5eOF+gPBB4fqnmE:fMhrsi13K53VEtmz7L0gK5LlLX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/26d7222f388489a3b762386fe0e1b23a8904e2bc3f009054a4d874c957778000.exe
Files
-
60052342b32beeb4a5c8245b2ea694f2.bin.zip
Password: infected
-
26d7222f388489a3b762386fe0e1b23a8904e2bc3f009054a4d874c957778000.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 564KB - Virtual size: 563KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ