Static task
static1
Behavioral task
behavioral1
Sample
660266ed24c207478d251977db52d4dd490e5048409178506d97d5e9b64ccafc.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
660266ed24c207478d251977db52d4dd490e5048409178506d97d5e9b64ccafc.exe
Resource
win10v2004-20230915-en
General
-
Target
bc1648454384a7152c6127ce91bdd4fa.bin
-
Size
2KB
-
MD5
c273a145441dbe227a8ecba4a16e30f6
-
SHA1
90749e6fde9b1146b8a9bb7a5b24e4285d936e34
-
SHA256
097374f78ef5cf5cb4182d018efbe269de969b2ce79fc1bf7ff58b0e2935105a
-
SHA512
72d3abd9ab1afbcb481bb737433c4a68f7791362b7a93b586623acf8bc3ac0627ef89f499722daf8fd6d3076814a4f1f242c6d991310b0e89f3e176f5a0972cf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/660266ed24c207478d251977db52d4dd490e5048409178506d97d5e9b64ccafc.exe
Files
-
bc1648454384a7152c6127ce91bdd4fa.bin.zip
Password: infected
-
660266ed24c207478d251977db52d4dd490e5048409178506d97d5e9b64ccafc.exe.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ