Static task
static1
Behavioral task
behavioral1
Sample
b6ee2236f896a3c6fc3f5086b7b63f27e73c293fffda6d429b72110b0ea69c44.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b6ee2236f896a3c6fc3f5086b7b63f27e73c293fffda6d429b72110b0ea69c44.exe
Resource
win10v2004-20230915-en
General
-
Target
11872687692.zip
-
Size
97KB
-
MD5
d1c27ecc1d0a71f3d7fcff26450e390d
-
SHA1
6492c0d053f4d57cca25575f8cd14ba92f7918d8
-
SHA256
542ed47c086c2e3e0b65f7b0019a6b9d8356d2276fbe5051a7cb04e4fbe10293
-
SHA512
e8f1b536230ab8fc846a224e3cb526daab9121df3c9353b3ce3d3a095594fd15b0638bc59f63d74fac0f33e505e1f7e68bb103c76eca849a623079585d8c41a0
-
SSDEEP
1536:VCDhUsUcGOtJjB2DdDpWA3xlaa2raK+kdra242Pa1O8c+IFOr6Dj4adpbh8plGm:8tUsO6JdReYa/irE2S6FOu37sbGm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b6ee2236f896a3c6fc3f5086b7b63f27e73c293fffda6d429b72110b0ea69c44
Files
-
11872687692.zip.zip
Password: infected
-
b6ee2236f896a3c6fc3f5086b7b63f27e73c293fffda6d429b72110b0ea69c44.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 213KB - Virtual size: 213KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ