Static task
static1
Behavioral task
behavioral1
Sample
4e925845732ac9682d1c35e5a8b2b495ebae048759eae8546974c74ceb661656.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
4e925845732ac9682d1c35e5a8b2b495ebae048759eae8546974c74ceb661656.exe
Resource
win10v2004-20231020-en
General
-
Target
bd0e45e4222d4a0159ae1347f9e6683c.bin
-
Size
3.9MB
-
MD5
ea0e6c154a8638d98955092f8b210e93
-
SHA1
ec157a9d08709176a578ea292dd108234d8eb9c6
-
SHA256
7e280e4fc858b927394541c2855a5a082f011ffa834e386070019516377393c9
-
SHA512
f1b6f521f93eaa69089ff76c0391d6f003ed52ae650787a57a279ad98a19d5511d6de7cb39478f114599c5ad846be17e0c67affff90732f098e665512c51f300
-
SSDEEP
98304:7rO4XiL6MNwq8q+JmBpNaNnGx+CjhnXK71:7rTE6Myq8q+KNUnGx+kQx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/4e925845732ac9682d1c35e5a8b2b495ebae048759eae8546974c74ceb661656.exe
Files
-
bd0e45e4222d4a0159ae1347f9e6683c.bin.zip
Password: infected
-
4e925845732ac9682d1c35e5a8b2b495ebae048759eae8546974c74ceb661656.exe.exe windows:6 windows x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 5.5MB - Virtual size: 14.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE