Static task
static1
Behavioral task
behavioral1
Sample
a1765648a41eea21fd942776cba9b50705673d8f7564ae7f8c9751eda9e2e564.exe
Resource
win7-20231020-en
General
-
Target
d497d6f5d3b74379d1ca2e1abde20281.bin
-
Size
907KB
-
MD5
76240a82c0a3c3dc4e8436479ac33a58
-
SHA1
fac4908d19289adce0c7dfa3589290c18bdb6d98
-
SHA256
a7a4d6b7a3c5c10ff9cc86fdb1b60f9f722484f38117b33b300ae7dad0249e1c
-
SHA512
7a9bd716f782cccddb2ad549de9b36f5114a807d17f592ed1087706b4626ba312ed38849bab9b41ab28e97e9ef30803568b763e873d4cb6a0d370cf060c3e274
-
SSDEEP
24576:U9WO2oPxvuVcbDdnxbjfnwg+yc9GbSr4rlF1umlJWsiiyxny:UcOvDxHnwg+r99r43blniiyxny
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a1765648a41eea21fd942776cba9b50705673d8f7564ae7f8c9751eda9e2e564.exe
Files
-
d497d6f5d3b74379d1ca2e1abde20281.bin.zip
Password: infected
-
a1765648a41eea21fd942776cba9b50705673d8f7564ae7f8c9751eda9e2e564.exe.exe windows:4 windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 929KB - Virtual size: 928KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ