Static task
static1
Behavioral task
behavioral1
Sample
fb05bb51cff2c073869c81d78a084650c62f061f0aad33138c862b36271a4054.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
fb05bb51cff2c073869c81d78a084650c62f061f0aad33138c862b36271a4054.exe
Resource
win10v2004-20231020-en
General
-
Target
b4cba829bb1dd386eef940e873fb1868.bin
-
Size
9.3MB
-
MD5
d68f4e8e081597915e0eeb288f6a7c8e
-
SHA1
539bc676deaf891c2db731ddd901bf4ea3fb6533
-
SHA256
3cc6395d31c89c9e7b7cb936fbf6055e7f85db57759dd96c9cfb59ae5766579a
-
SHA512
a4b7fd47718daac8f3e5b0281456c70f4b9370cff1b3425d4f3fde87097eb355b3c3c84ce1abaa7654620a8d5c0c799bd68e59514a2e08649e1abd4f79bd3239
-
SSDEEP
196608:yxYQ2e22peC/XQmPWoHXPGbwPW580eisDQuZiBG31O2oPKVAGqH5kp:yxYnmFH/G0PWi0eis6B+Y24KOZkp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/fb05bb51cff2c073869c81d78a084650c62f061f0aad33138c862b36271a4054.exe
Files
-
b4cba829bb1dd386eef940e873fb1868.bin.zip
Password: infected
-
fb05bb51cff2c073869c81d78a084650c62f061f0aad33138c862b36271a4054.exe.exe windows:4 windows x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 11.5MB - Virtual size: 11.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ