Static task
static1
Behavioral task
behavioral1
Sample
11c38fc24bf7b29cd6e974670bc11d7f92af124d8b7edcd89482500f4de3d442.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
11c38fc24bf7b29cd6e974670bc11d7f92af124d8b7edcd89482500f4de3d442.exe
Resource
win10v2004-20230824-en
General
-
Target
81af4f2d111cb10c9b5922d02b3751e6.bin
-
Size
10KB
-
MD5
3e59caeb5816298001f25a91fb9a9119
-
SHA1
5a5e6eebda6d1d8f3cbc4849706e31c8b85e787e
-
SHA256
78e576e4a858d74a0a53e72598889f09ef17abe933359cbe121d08493c7f1bf1
-
SHA512
b0ac780070511fefb81dcfe65a83fc3022b498620dc5fdf7054245ab5c86dd646a368401754c6f594aa8579d17537f206408940ee61051f8995853bb758832e2
-
SSDEEP
192:Ge8mLeoRla/ihoRgMhReOCjp8ZjiDCbBurVO/1RZM/qO8XPk3X8rHK:Ge8mLeoREih2nHErVGRhO8/k3XEK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/11c38fc24bf7b29cd6e974670bc11d7f92af124d8b7edcd89482500f4de3d442.exe
Files
-
81af4f2d111cb10c9b5922d02b3751e6.bin.zip
Password: infected
-
11c38fc24bf7b29cd6e974670bc11d7f92af124d8b7edcd89482500f4de3d442.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ