Static task
static1
General
-
Target
1999X.zip
-
Size
378KB
-
MD5
f8c0643c509a70d61ff7b52524e2c928
-
SHA1
8968d60113a903606c22df7db83446da152f500a
-
SHA256
c2df01633c10e0d88a6ff465851859dc071631a1551200ce1c323d829f27359b
-
SHA512
e4cd656187ca76cd34faa6cebd647810d44b669767854a21339a811959f5a08f362406d894769e20b13f49406dfcf061e4c12b93ac60c1388f6a347ddbad7af8
-
SSDEEP
6144:6VdgighmN85SVruN+bTQLdfnBIELoWeWAyUOM7k6Nw8AWqShpz4ZLCyUDP36bZvK:UehmC5irm+XQpjLaZ5Ofuw87qShp8yDx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/1999X/1999X.exe
Files
-
1999X.zip.zip
Password: 1
-
1999X/1999X.exe.exe windows:4 windows x64 arch:x64
Password: 1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
$,$2/kO Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 537KB - Virtual size: 537KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ