Static task
static1
Behavioral task
behavioral1
Sample
590174d2040587e7d46ce41379753c4a4fca2133532f7bd535db0555ae085a18.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
590174d2040587e7d46ce41379753c4a4fca2133532f7bd535db0555ae085a18.exe
Resource
win10v2004-20230915-en
General
-
Target
beeac0f2bf33affbcb2103b237b1a9bb.bin
-
Size
13KB
-
MD5
ea8eaf74aa279dce4b2539f0672361cf
-
SHA1
d87f36154252308e1b90504b9d651ee190b28c6f
-
SHA256
ccc7dd888269d8314db1abf2491733992d2b3d95d0def83efcc1180e23930488
-
SHA512
e95b2c43abe42e100b680d530a6c1903978a91976d301b5d10004e3993e5fbf9aaa1e2190d528a195f544edd9a6a50440410f2d18f92003022bba2de8ef6ee85
-
SSDEEP
384:CoYE2kE9MDwHAYFhrkQnhJRd0o0t6U82JuXX:CbIEmUAYFhnhxF0t6RX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/590174d2040587e7d46ce41379753c4a4fca2133532f7bd535db0555ae085a18.exe
Files
-
beeac0f2bf33affbcb2103b237b1a9bb.bin.zip
Password: infected
-
590174d2040587e7d46ce41379753c4a4fca2133532f7bd535db0555ae085a18.exe.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ