Static task
static1
Behavioral task
behavioral1
Sample
d494417923b2f629614f1007203dc96c5f87c7c99bcc5c30f02c9fdb20092f18.exe
Resource
win7-20231215-en
General
-
Target
13757211760.zip
-
Size
1.2MB
-
MD5
d03c3a307c0fc935b8ceb32835465f4e
-
SHA1
ebffbc73498f08407a25381134d02f5e7cb8cb5d
-
SHA256
91b5f15b7fa1de5ea24838e613eebde36b36677d103272047508b5880758a366
-
SHA512
e368bff694e30e3ceaa231c2f05df3f797890513dbce17e0969679b8c48bcae0a6c67e1da65f010531f74c201b4754501652a98c255a047f91fddc5b8cf4c987
-
SSDEEP
24576:cVDcdNio2ct5NnUji1tRZLtUKp1Egf7JKNeI1aAi4H6btifYx:cF8woPLeip1EgDJq1aAT6b1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d494417923b2f629614f1007203dc96c5f87c7c99bcc5c30f02c9fdb20092f18
Files
-
13757211760.zip.zip
Password: infected
-
d494417923b2f629614f1007203dc96c5f87c7c99bcc5c30f02c9fdb20092f18.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ