Static task
static1
Behavioral task
behavioral1
Sample
97e14bfa1588fd30e1a79871c838360776448c50fb18610c872f6c477d33a0ef.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
97e14bfa1588fd30e1a79871c838360776448c50fb18610c872f6c477d33a0ef.exe
Resource
win10v2004-20231215-en
General
-
Target
97e14bfa1588fd30e1a79871c838360776448c50fb18610c872f6c477d33a0ef.exe.zip
-
Size
2.2MB
-
MD5
f7cc8d89b94532175b94c8585e60a43b
-
SHA1
4a30de7d3b759b524221339a6232b894198955f7
-
SHA256
84d76a60f7fe6b33913ca45ab4bcc8dc2b86915e137c8ce72d94940aaa8b90e7
-
SHA512
2acf447a73666c12b0d84964bf78780ef711a3849d8887a2d663174af897a194dd4566b46bb21acad1f719e00a4f523795062dfbeaf6288121c2ee051a23261f
-
SSDEEP
49152:FLXm5TwD5LoQwbI/FNsUMBErleYHO39dJpA6mudiOlyTKZq/UmUDbgmsJu:FWhhxM/4UM+Bvs9Bk4g/dUJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/97e14bfa1588fd30e1a79871c838360776448c50fb18610c872f6c477d33a0ef.exe
Files
-
97e14bfa1588fd30e1a79871c838360776448c50fb18610c872f6c477d33a0ef.exe.zip.zip
Password: infected
-
97e14bfa1588fd30e1a79871c838360776448c50fb18610c872f6c477d33a0ef.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ