Static task
static1
Behavioral task
behavioral1
Sample
b1c809fdb081893fd2fc35b8e757bc684c5f222cea0eeca0e2c62cb73f89ead7.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
b1c809fdb081893fd2fc35b8e757bc684c5f222cea0eeca0e2c62cb73f89ead7.exe
Resource
win10v2004-20231020-en
General
-
Target
db0bec9092b3322fb8a3a563f4447ab2.bin
-
Size
124KB
-
MD5
af49b135ece68fbef5ed3e999ca67f37
-
SHA1
390fdc0c26861a3065d9ceebf1ec1b5cbedf6d03
-
SHA256
f74f4c5fe512b75e7a221264dbe68fd1fa0f69276743817db25dcbd7b9ca2a8b
-
SHA512
5bb6e33e392000961c5719f6d3e6ef71e158fa4badaf8277c36a997bac31f3c805fba0fa03b609b4da3954e3f4616ef1df586668ded68461717ff2ffd101338a
-
SSDEEP
3072:10dkFPT1uoO2130VHZY2dw1NlsD3vhXon+8n:SdkJTkoO213/2dw1Nlsr++8n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b1c809fdb081893fd2fc35b8e757bc684c5f222cea0eeca0e2c62cb73f89ead7.exe
Files
-
db0bec9092b3322fb8a3a563f4447ab2.bin.zip
Password: infected
-
b1c809fdb081893fd2fc35b8e757bc684c5f222cea0eeca0e2c62cb73f89ead7.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 287KB - Virtual size: 287KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ