Static task
static1
Behavioral task
behavioral1
Sample
1c9bbc7877083e9526d0a19ee88f5910e81754b7c22a03d7234f7b7ca720fa65.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
1c9bbc7877083e9526d0a19ee88f5910e81754b7c22a03d7234f7b7ca720fa65.exe
Resource
win10v2004-20231023-en
General
-
Target
ba523d756b02debdbcd004fd1ce21caa.bin
-
Size
43KB
-
MD5
59e95c50f0f32a838cdd5a5b408309c0
-
SHA1
57f77f5b2db20b7c856cb6e7d53a9f428d9edddb
-
SHA256
e50926ea15a387f480c9318f37eeac58eaaa3e4751d94e9f18b4ba0374221a72
-
SHA512
13c90080b947dfc2dc47cfdfa594efb96aa3bdea2422bc4d14fee977549f6d5cbd81fd0d0f7a03935f70c043e21efdb8d7d98409eee396ac6fe29f9d5956f900
-
SSDEEP
768:ukuS4oM4oAefdL6LnzLjylYNScoq1SkFchYOhJAVZytuxWs8v7FlnxtEioAVCZE4:ubOQmL/+YQfqJaJAzYuxoJxti2RyLd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/1c9bbc7877083e9526d0a19ee88f5910e81754b7c22a03d7234f7b7ca720fa65.exe
Files
-
ba523d756b02debdbcd004fd1ce21caa.bin.zip
Password: infected
-
1c9bbc7877083e9526d0a19ee88f5910e81754b7c22a03d7234f7b7ca720fa65.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ