Static task
static1
Behavioral task
behavioral1
Sample
6b72011fb35c142f59391f1a1a0fed9b6d94b296e314d980e57a47f395ec5ec2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6b72011fb35c142f59391f1a1a0fed9b6d94b296e314d980e57a47f395ec5ec2.exe
Resource
win10v2004-20231215-en
General
-
Target
09a5c1cc41a26c436978ceedabc7a258.bin
-
Size
366KB
-
MD5
39a1d868a438b695f47c67b97a83e38b
-
SHA1
710a1ac46e68fb4765eebc30723837fc6a53ee49
-
SHA256
f09f51516df4173f39e880b902743ba145e12f3e8ea5a2e8c2401186b190fcfe
-
SHA512
ac3ab916f4884a3886f3807b6a4988191307e4db3c5e955ff00fbdcddaa4ef76d32345ed2aed0c28df330c679a59fb941327e061e121f33d24b6ec39024c6d2a
-
SSDEEP
6144:BdaRsAHDFb09VS19wdNDHD1aKTc73QcWx/qqSw7jvSijWKTQ6/xOpgVPPJZZtT1z:BIjFbYVq+DpaKoTQJxembSjKM0+gVXDN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/6b72011fb35c142f59391f1a1a0fed9b6d94b296e314d980e57a47f395ec5ec2.exe
Files
-
09a5c1cc41a26c436978ceedabc7a258.bin.zip
Password: infected
-
6b72011fb35c142f59391f1a1a0fed9b6d94b296e314d980e57a47f395ec5ec2.exe.exe windows:1 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.clam01 Size: 580KB - Virtual size: 580KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.clam02 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.clam03 Size: 404KB - Virtual size: 404KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE