Static task
static1
Behavioral task
behavioral1
Sample
fdf432e7576bc75fcb800a21af72cf89ac726e78c80650f39ada4917abf2aa40.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
fdf432e7576bc75fcb800a21af72cf89ac726e78c80650f39ada4917abf2aa40.exe
Resource
win10v2004-20230703-en
General
-
Target
d34cc79c32e7ad12ca8a5e5c4f04fded.bin
-
Size
569KB
-
MD5
b9a53805aee9df33f308afa76399dbd9
-
SHA1
e86461221e05dc698d6ca7b3fb3ab8be3ce17063
-
SHA256
affbacbc26da828895413361c203bab42291d8e6fd1e0a01775485f67c1d28fa
-
SHA512
71950fb34e1e8527b1e8869cca51aaeff3ef7b2ca887a68f8cc30033b58a624a9c3f6fa0aa7df8aba4b5cd46cc951f188f77ade294b310e2b41bd8cb6a5c16a1
-
SSDEEP
12288:cKPSSeWVb6IfebGvgNqhuK1vtudprgvtRlrfJZXndr9ADtJ:db6IPvgNab3tffJhnEDtJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/fdf432e7576bc75fcb800a21af72cf89ac726e78c80650f39ada4917abf2aa40.exe
Files
-
d34cc79c32e7ad12ca8a5e5c4f04fded.bin.zip
Password: infected
-
fdf432e7576bc75fcb800a21af72cf89ac726e78c80650f39ada4917abf2aa40.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 582KB - Virtual size: 581KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ