Static task
static1
Behavioral task
behavioral1
Sample
5e1f0a0ce45a5ba2878876ad2076b096e6261867468142f41c6a6e7cc985d3f5.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
5e1f0a0ce45a5ba2878876ad2076b096e6261867468142f41c6a6e7cc985d3f5.exe
Resource
win10v2004-20231025-en
General
-
Target
5e1f0a0ce45a5ba2878876ad2076b096e6261867468142f41c6a6e7cc985d3f5.exe.zip
-
Size
32KB
-
MD5
fc4d4925712c95692e586a05d2c58be3
-
SHA1
d737f85b329d1c5873483f4048f88c4f710ee46b
-
SHA256
c379d9892da9461c92b39da7535980cadd9f6b7424895e1ba7e26b374bb85927
-
SHA512
771c55ba33a51e736801d992cb2190d2951bd3125c2d738fcf711546cbbe2b5925b8abfe375b125c20a04a55ddd2d364c986b1ba953405ed8ae4ddf76ad7312d
-
SSDEEP
768:33Snh6vJLQwG30BEO9Cx6I/RTQgzVJrC6ovIz9h1mUZMOcuMXGWSYGjNxLQ:3Ch6hQw6eeh/RdZJ+6jVmUKmWDuNm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/5e1f0a0ce45a5ba2878876ad2076b096e6261867468142f41c6a6e7cc985d3f5.exe
Files
-
5e1f0a0ce45a5ba2878876ad2076b096e6261867468142f41c6a6e7cc985d3f5.exe.zip.zip
Password: infected
-
5e1f0a0ce45a5ba2878876ad2076b096e6261867468142f41c6a6e7cc985d3f5.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ