Static task
static1
Behavioral task
behavioral1
Sample
b447ffbe7709d4a771530b8c624569874c5078eae065edcf29167b64b609f342.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
b447ffbe7709d4a771530b8c624569874c5078eae065edcf29167b64b609f342.exe
Resource
win10v2004-20230703-en
General
-
Target
9d76deb0dafc8e6cc6f12c90b4e20790.bin
-
Size
646KB
-
MD5
b2eb38194acb9eb4a2fd1e1f3b71d5f7
-
SHA1
6931029181be453f0120a1e265561b15329b702c
-
SHA256
13a778798d9a88108be551c956e8ffb6d705a054dafab3131962813d32b3f0fd
-
SHA512
9873f71c4747535e3133e7d6c95b582ad29f928c7666863a3473340739ae9a1d91e08fdc8e523cb1e030b7e96210d2d589d2e0bf1f817bdbf166360ba93c7d5e
-
SSDEEP
12288:4WDx/m6LsrtmPdlOhX8P8BkELXI7OUxljXjAcwmCxb8RLDaoJDM02+LzGdbKQX:4wuMsRmOh7BPE7zRw1EaoJDL1ns
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b447ffbe7709d4a771530b8c624569874c5078eae065edcf29167b64b609f342.exe
Files
-
9d76deb0dafc8e6cc6f12c90b4e20790.bin.zip
Password: infected
-
b447ffbe7709d4a771530b8c624569874c5078eae065edcf29167b64b609f342.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 813KB - Virtual size: 812KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ