Static task
static1
Behavioral task
behavioral1
Sample
616432b80e4e48c0b1f890fa7ef4f27178a93f0f1972d275a9391d8614f86dcf.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
616432b80e4e48c0b1f890fa7ef4f27178a93f0f1972d275a9391d8614f86dcf.exe
Resource
win10v2004-20230915-en
General
-
Target
c8400ff901736f6ea8e9a505562b1791.bin
-
Size
186KB
-
MD5
6e19dcf0576e5980d87855c0dad8323e
-
SHA1
6e6d859262fe4ecb4b5c084fa2bcdb77fb5d0ee3
-
SHA256
6105b1dd010422797f2be506d3c702602fa1b2ee2c29fc9f74f5364eab58bbc8
-
SHA512
caeec84b4bd01a559c208f7d0e67baed7141dc3fa17824f559bdea787300d1bc0b2673d06e2ca7bf355d33ab8ff77196da76bdae3115bcfb184f07b98e75b888
-
SSDEEP
3072:AYheqYTRvuIr5A4NIs+Gb5PutGYKUO0RJGCeKR5HRurImPhkD5Dyzz+Zco3aZPDY:tcqYRv8yhtGtGYKUOBCeKRlR0PkQg3K0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/616432b80e4e48c0b1f890fa7ef4f27178a93f0f1972d275a9391d8614f86dcf.exe
Files
-
c8400ff901736f6ea8e9a505562b1791.bin.zip
Password: infected
-
616432b80e4e48c0b1f890fa7ef4f27178a93f0f1972d275a9391d8614f86dcf.exe.exe windows:4 windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 560KB - Virtual size: 560KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ