Static task
static1
Behavioral task
behavioral1
Sample
12b2fba3e9d8b5d287e3d9e6fb6fe2ed7f1652bce0af56d5dabf93c38fbf723b.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
12b2fba3e9d8b5d287e3d9e6fb6fe2ed7f1652bce0af56d5dabf93c38fbf723b.exe
Resource
win10v2004-20230915-en
General
-
Target
a0250d1ec0c2364e5061e60f0c885dea.bin
-
Size
29KB
-
MD5
c7cec842c506bb320c951d70fb7661f3
-
SHA1
48231959ee72a1d47169ebbbf1d3d8a25c953011
-
SHA256
67ba19824a9fa1cbf9fde2d8faf6e4833b4f65ece8b0fa758090cf9167b73a93
-
SHA512
acf492a7de4ff489bdfa362041652f8cebe18a9d26aa8c9f7163e436da931658d354f99150851d77eb59ef5d4fd0b6f0a4fea6cffcbbdae7d2b2c6d38e73b105
-
SSDEEP
768:028jtP4qNrMJjNYtEqDzZsEcZxBxIC/rq0ZHx2xCTTvL:07jtP4qNWNYtEqDzZbcPBxb/GgHECj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/12b2fba3e9d8b5d287e3d9e6fb6fe2ed7f1652bce0af56d5dabf93c38fbf723b.exe
Files
-
a0250d1ec0c2364e5061e60f0c885dea.bin.zip
Password: infected
-
12b2fba3e9d8b5d287e3d9e6fb6fe2ed7f1652bce0af56d5dabf93c38fbf723b.exe.exe windows:4 windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ