Static task
static1
Behavioral task
behavioral1
Sample
cab876614b0a34bf3534506ef5b37f2e50579488de269eed485d9054711ddf6c.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
cab876614b0a34bf3534506ef5b37f2e50579488de269eed485d9054711ddf6c.exe
Resource
win10v2004-20230703-en
General
-
Target
fd147d11f98c8c462facb9cd7df51ee6.bin
-
Size
549KB
-
MD5
f2c027bb04320402dfa599d19f5a98be
-
SHA1
629108320858778ae12e966bb491e1b86179eac0
-
SHA256
b159a514f80e8ea44719a4ab0a7354e9c657eff5c5364b961a0934325a9af4b9
-
SHA512
5676f960aef8a7e4a7ea8069fa647fff82cf91c6311ae91bf5d357d60e03d454e9df8ef5cc032ed315b401a3309e5fa4eddd3d7d6ec10aac2338a6618f2c7914
-
SSDEEP
12288:QgaIvkIh6XEwCKjydconDi6cGQ/tY8O/Mu9RuheksDpJgvBHxSN:NNeEwCKjy/i6NQ20u78e5DpocN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/cab876614b0a34bf3534506ef5b37f2e50579488de269eed485d9054711ddf6c.exe
Files
-
fd147d11f98c8c462facb9cd7df51ee6.bin.zip
Password: infected
-
cab876614b0a34bf3534506ef5b37f2e50579488de269eed485d9054711ddf6c.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 605KB - Virtual size: 604KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ