Static task
static1
Behavioral task
behavioral1
Sample
1f3b7a5b5dcad705398697e8cf460beab8a73d05d299a6dbbebe96f10b8a00b1.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
1f3b7a5b5dcad705398697e8cf460beab8a73d05d299a6dbbebe96f10b8a00b1.exe
Resource
win10v2004-20231023-en
General
-
Target
1d081762c9418e17364d27b984ba2ae3.bin
-
Size
1.4MB
-
MD5
29516dd299b1ffe8a614fdf909d4b2ff
-
SHA1
df60384a90bf88ba9407543ee189ee38f5946baa
-
SHA256
ae99f825dc710d98eb9b81d79bd1972790f77b8edd259f9ad765ef06abb34877
-
SHA512
f83edcde0b270990c19aac4808fe2d435c30cdddf103b0d25bd197229f51ff8cc8a76734d301eb3d0f8bd093928d5cf604e8be7e6f9ec394f8b6e8ec1894f9fb
-
SSDEEP
24576:2IWNH8TS0/KDJN7QNRrah+d+Kwt7cR03t7udkmaZq8epYzu9H5xYPOQ:2IbTaDUbOA8xd71S8ny15xYF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/1f3b7a5b5dcad705398697e8cf460beab8a73d05d299a6dbbebe96f10b8a00b1.exe
Files
-
1d081762c9418e17364d27b984ba2ae3.bin.zip
Password: infected
-
1f3b7a5b5dcad705398697e8cf460beab8a73d05d299a6dbbebe96f10b8a00b1.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ