Static task
static1
Behavioral task
behavioral1
Sample
812b27ed68264a70117bc3b20c61c49782b036886d318d9df36d7323fca75396.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
812b27ed68264a70117bc3b20c61c49782b036886d318d9df36d7323fca75396.exe
Resource
win10v2004-20230703-en
General
-
Target
812b27ed68264a70117bc3b20c61c49782b036886d318d9df36d7323fca75396.zip
-
Size
1.4MB
-
MD5
fc68865934fc9ca64d9e2716582e9622
-
SHA1
9abec51f247473f8840c2d72cec15f812f33c3fe
-
SHA256
d80c2910ea5380a9c80d60532eaf431496fbeed39b336cef705e3f2e28f96c8a
-
SHA512
61d8feb2b681d07dff81adb587fc09acd6ab8c3d05c1d6850bca2608c4b0e60fe3349f2ae79f6a0ca40dabef84cc66ddba8b2a31c4e68e08661170e792912c17
-
SSDEEP
24576:NlHwpzh5TcUDI0ulfCZzFiDNuntNxjKfM2RxtLMKaHAsmgHT83pM8fet4GXxzLwU:E9lDI0Yf8UNuncfM2pLzwD8Ej3M0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/812b27ed68264a70117bc3b20c61c49782b036886d318d9df36d7323fca75396
Files
-
812b27ed68264a70117bc3b20c61c49782b036886d318d9df36d7323fca75396.zip.zip
Password: threatbook
-
812b27ed68264a70117bc3b20c61c49782b036886d318d9df36d7323fca75396.exe windows x64
Password: threatbook
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ