Static task
static1
Behavioral task
behavioral1
Sample
b89f5446656a69ecc7fb12d7d8f1ff6b5d0679b43d810dfdaad00e807783a471.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
b89f5446656a69ecc7fb12d7d8f1ff6b5d0679b43d810dfdaad00e807783a471.exe
Resource
win10v2004-20231023-en
General
-
Target
dc8c2c5d397e7e966ba359f5c5618766.bin
-
Size
355KB
-
MD5
22c8c3917ed9a471fb922e62b0df30b5
-
SHA1
93b41368ac4dac4fff57edbe84ffd2def16b7756
-
SHA256
c42034f0791dadcc7b933fff7b691daf12739f696b63a3ae1a58ff5f7ef987bf
-
SHA512
f39cf49687868f7033c47466f5bcbe6eacb3cd4da537361b1ef7df553e091c0c881866826ff5eb471d19540983f2ba5a7b345bf5dd74a368f76c08da8dac9475
-
SSDEEP
6144:ajwBGSn0Oar5pVGDAZTlNaXFq32LOxj/edx+UR34NFKPKlS7tuqu5o/:90OgGQJNF32LgP034NFKk8tuRM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b89f5446656a69ecc7fb12d7d8f1ff6b5d0679b43d810dfdaad00e807783a471.exe
Files
-
dc8c2c5d397e7e966ba359f5c5618766.bin.zip
Password: infected
-
b89f5446656a69ecc7fb12d7d8f1ff6b5d0679b43d810dfdaad00e807783a471.exe.exe windows:4 windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 704KB - Virtual size: 704KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ