Static task
static1
Behavioral task
behavioral1
Sample
02451442070347dc5eabb568d97a3e29cfa25c6c0244908c643f6b441609c036.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
02451442070347dc5eabb568d97a3e29cfa25c6c0244908c643f6b441609c036.exe
Resource
win10v2004-20231023-en
General
-
Target
9c0aade50e42f696258c6a26fcf44b99.bin
-
Size
1.4MB
-
MD5
a8df40319984b3747a20518957c8c65f
-
SHA1
f36d16d3a5e4d6b94f7ad0c041ac288c239120bf
-
SHA256
1f494140eecf1192b31e9c4a54215137fb2cfd5cda49c0c88fedb7ab49fa0bce
-
SHA512
b21750735d832841c88b321d4076e1b2cff3e0b40737ae432c69d0152c182384278c9605c37620dfbeed6067637832385113f692ee7d022d2aa3998f83713492
-
SSDEEP
24576:BgDQ74Fvtab3zz0R9pzFipdU54yCHwxJnIR+Y0dl9D0iJRbucH4ECGkRWaoUlfaq:QQMab3X0zFipOOHGJn6+YS97bucHxCG4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/02451442070347dc5eabb568d97a3e29cfa25c6c0244908c643f6b441609c036.exe
Files
-
9c0aade50e42f696258c6a26fcf44b99.bin.zip
Password: infected
-
02451442070347dc5eabb568d97a3e29cfa25c6c0244908c643f6b441609c036.exe.exe windows:4 windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 32.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE