Static task
static1
Behavioral task
behavioral1
Sample
ec6f9d90515c1f077c510efde297792a1dec4a5c3b1653baad3155a2df6be0b6.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ec6f9d90515c1f077c510efde297792a1dec4a5c3b1653baad3155a2df6be0b6.exe
Resource
win10v2004-20230915-en
General
-
Target
0699af667fe97c6bea49453b85828337.bin
-
Size
1.5MB
-
MD5
ba6ece2c21a76bdb79e1658190bfb5c1
-
SHA1
e8c7e4de61f47b6866469d6cf27d14b103eede1d
-
SHA256
35f112a9747cbf00a5cc0b3f2f81d79a266b38abe99b5e5171cceaf3acedc144
-
SHA512
868c4f83b6e4f590fd11ef95d6215d7f069fc78be308419e17a26874c58cf4cba6b301a1f4160cda15e91a8680accd22d6804d58d1e4912605ceb7de9ee203d3
-
SSDEEP
24576:k8sqYxeNp52i+hqeC4+CegWLgfY37Z0kokVfqru9qq9p2+JStXp00qcrt5XL8IU3:kBeQC4+n9LSjkokZ9qMXgkeX4IUbz3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ec6f9d90515c1f077c510efde297792a1dec4a5c3b1653baad3155a2df6be0b6.exe
Files
-
0699af667fe97c6bea49453b85828337.bin.zip
Password: infected
-
ec6f9d90515c1f077c510efde297792a1dec4a5c3b1653baad3155a2df6be0b6.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 506KB - Virtual size: 505KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ