Static task
static1
Behavioral task
behavioral1
Sample
f6f01ade7874638c8ae81ce72145b74651b4b189eabd46f025164ece54823356.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
f6f01ade7874638c8ae81ce72145b74651b4b189eabd46f025164ece54823356.exe
Resource
win10v2004-20231023-en
General
-
Target
d479995d29e10f65b48eaa36a70dc5b8.bin
-
Size
43.0MB
-
MD5
c15d085e09e56f2184424bd9a3521044
-
SHA1
aa0dff4f0120fe3bd7c65d7bcf7078d2378cfc04
-
SHA256
fdbb57b25a63750b05c4e62702e426431d1f8359a7ba08d870d0bbc7b5c79332
-
SHA512
ed162d484f7e29d938c72306d71c44329e5c9e06520bb0d9a594f327f67f5ff1fea29cff5c5944f3e30e9efe9f1397d8a10d1fda18a1b9efa7caf798b4b91445
-
SSDEEP
786432:kTlDsT3GmS27QBfXFwAnwej6BPCILHikWd9cYf+W42sog5KTP0kt:k9S3Vuf1XnYpfU4Rog2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/f6f01ade7874638c8ae81ce72145b74651b4b189eabd46f025164ece54823356.exe
Files
-
d479995d29e10f65b48eaa36a70dc5b8.bin.zip
Password: infected
-
f6f01ade7874638c8ae81ce72145b74651b4b189eabd46f025164ece54823356.exe.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 19KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 20KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 42.1MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 951KB - Virtual size: 952KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE