Static task
static1
Behavioral task
behavioral1
Sample
8e6bb07ca82d3156c2fd8cb2cf00ece0b4c0ad294a6583c7b30cb73f65a05327.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8e6bb07ca82d3156c2fd8cb2cf00ece0b4c0ad294a6583c7b30cb73f65a05327.exe
Resource
win10v2004-20231215-en
General
-
Target
86265b072ed0d84418932f5628ad1abf.bin
-
Size
367KB
-
MD5
f742da9b1e43b25bd397cdefd3f71a17
-
SHA1
854d996aac419c878f382008964118a1cd6ef763
-
SHA256
639b2042602c2fa1e1bee9b725a47b2366433a5a6857b42a5808861363ea0169
-
SHA512
02edbc72c244b506a0a4d9181186eedb93888ba8059b8efd99fa9c250d793341c5382538f0d2b05320a8b01161e8aaed56ea5a8a89c25251b25c8d72454bda45
-
SSDEEP
6144:zw/2US8qQvgb9dT3giBP+nm1AvXJc5ntgWv8DKgrB/FZPLPdVSbiCsub0KuX6ZHw:c08qrxd7gi8m1y+mw1gpF5dwbXsY0jcw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8e6bb07ca82d3156c2fd8cb2cf00ece0b4c0ad294a6583c7b30cb73f65a05327.exe
Files
-
86265b072ed0d84418932f5628ad1abf.bin.zip
Password: infected
-
8e6bb07ca82d3156c2fd8cb2cf00ece0b4c0ad294a6583c7b30cb73f65a05327.exe.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 660KB - Virtual size: 660KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 348KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ