Static task
static1
Behavioral task
behavioral1
Sample
a22f38c26dc96fa285efd4c0732a22e9bb81b105ad65c75c609a478dd551ac13.exe
Resource
win7-20230831-en
General
-
Target
1173a1f0469d241b02c1d57dc29cdf4d.bin
-
Size
623KB
-
MD5
d132314714e0d128f630333b73ce57c7
-
SHA1
40f933e2c56183be21e47f3ac3ecc17a68d1c9a4
-
SHA256
57e1f6b17381fa0659b19afdfa944a11205caae6556006f00bae5f6e39cb15d6
-
SHA512
4c1790ef04493c730601361657e986cb96dbd76a7863653e4fe815ea4d9671359bb6811d8b3e0523d856fc2830b5e4a5545af864520acabe33cbac9ce9f69db3
-
SSDEEP
12288:aUOZ1Am9hZZN1v41EJIFdaMXsZtuA055zyk89HD+quCCSlSzhOyF+j7tza:anZ+m9hLv41EJEH8Z10DY9jbCSlkN0la
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a22f38c26dc96fa285efd4c0732a22e9bb81b105ad65c75c609a478dd551ac13.exe
Files
-
1173a1f0469d241b02c1d57dc29cdf4d.bin.zip
Password: infected
-
a22f38c26dc96fa285efd4c0732a22e9bb81b105ad65c75c609a478dd551ac13.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 626KB - Virtual size: 626KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ