Static task
static1
Behavioral task
behavioral1
Sample
49b99281ff759b1dc7bcb969e72d88ecd59b897cb4f0f8c1158fcd1742d75e96.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
49b99281ff759b1dc7bcb969e72d88ecd59b897cb4f0f8c1158fcd1742d75e96.exe
Resource
win10v2004-20230703-en
General
-
Target
f06d347d154b33354624607216867cad.bin
-
Size
564KB
-
MD5
b53ac9e54f292af6eefd8ce95f991497
-
SHA1
a923bbc8b5e502d8d4e89a19b8ac95afc7843cdc
-
SHA256
5cba132a86181ccca8ca174423ebb2a9becc3b0aae73e3fe52f10d4a3172c5d2
-
SHA512
e8c60a44fd5833471495fb354a8862030eee861371bdf5b238cf9dc4e1cfa657fbed84fbf9d921a271e0744dbc488fd2e656e5dde5327f7caca0c8692cb92f7d
-
SSDEEP
12288:uFPYuE2H8l604qUPDF5Sb+H/YmusSpFwvFFs0DNaOfVsr1gKNxQ:FuE2jjF5Sbk/Y64FwtFsCa4VsBJNi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/49b99281ff759b1dc7bcb969e72d88ecd59b897cb4f0f8c1158fcd1742d75e96.exe
Files
-
f06d347d154b33354624607216867cad.bin.zip
Password: infected
-
49b99281ff759b1dc7bcb969e72d88ecd59b897cb4f0f8c1158fcd1742d75e96.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 582KB - Virtual size: 582KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ