Static task
static1
Behavioral task
behavioral1
Sample
5c047391ef1f012229e0f8bbb0d1abd6159a1d9106ef1c5e6f463786b367c53d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
5c047391ef1f012229e0f8bbb0d1abd6159a1d9106ef1c5e6f463786b367c53d.exe
Resource
win10v2004-20230915-en
General
-
Target
de4775b238caf2bda355f311bd605e2f.bin
-
Size
539KB
-
MD5
6d82449584cbaa9f34c8daed1a44996c
-
SHA1
014461bd326255df7294bd1e69d0909cb2852a1f
-
SHA256
54fe2d4839b842975b85cd818c2ae6f51ff16b309365e3c361fe7674f089bd8f
-
SHA512
93b21b51d68d0368f6b0e056b61eed579ddca91f874bf9429c257d8120b5c95f115b3205f919fa73ec19bad3f7ac2a7ae6eb7279530cbe8b1243252c82b152ff
-
SSDEEP
12288:Sta/X9p7dVdvlV/qNk1oLw1KU0Wg1tK+ySFC2SFFp+bPsJ2UhBOoW+:SQtpAe1w03CK+yiSFFpWPsbOM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/5c047391ef1f012229e0f8bbb0d1abd6159a1d9106ef1c5e6f463786b367c53d.exe
Files
-
de4775b238caf2bda355f311bd605e2f.bin.zip
Password: infected
-
5c047391ef1f012229e0f8bbb0d1abd6159a1d9106ef1c5e6f463786b367c53d.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 558KB - Virtual size: 558KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ