Static task
static1
Behavioral task
behavioral1
Sample
20cdad829e87d6b52b80273488bf103d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
20cdad829e87d6b52b80273488bf103d.exe
Resource
win10v2004-20230915-en
General
-
Target
20cdad829e87d6b52b80273488bf103d.bin
-
Size
4.5MB
-
MD5
20cdad829e87d6b52b80273488bf103d
-
SHA1
6f06b587fa7f6eeb7b15a53bde9f0ece2f55ac67
-
SHA256
09c86fc57dce8aceee45fa3727c4e3ab8fa7bb13885e6db59dc72d719f1829ca
-
SHA512
d1887c0e4e9b7634234dd8d8ec797bebfe9021e30cdb299b1fed569011ad1a221aa9afea1b8979e5cccc51d97a539cba8908fa0fe410c429c35d2fc56889c910
-
SSDEEP
98304:2QtPknqjQMPknqoQkQaVIIOzRQEjhuStSEb6kqXf0FIblY1:2cMIVMvNvVVqlhuvBkSIIblY1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20cdad829e87d6b52b80273488bf103d.bin
Files
-
20cdad829e87d6b52b80273488bf103d.bin.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ