Static task
static1
Behavioral task
behavioral1
Sample
859ce7250457511d1a2b79e0f6430b8e384e8578490e3f00e49490283a7091ae.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
859ce7250457511d1a2b79e0f6430b8e384e8578490e3f00e49490283a7091ae.exe
Resource
win10v2004-20231215-en
General
-
Target
04e918374a777e166f4040d0fc5371aa.bin
-
Size
6KB
-
MD5
1d659c67733b5f5c4bbafc833c7165bb
-
SHA1
ec4b138943d3219e5eb6ccfd58c54639b1c1014d
-
SHA256
077b6c8edeaba5cd8dd75c7e7944c04230061a56305693011c1ef34aca1d7c2c
-
SHA512
45b37ee85e2940b737ddfcccf7ad44731bd2592fec73020828359cf99a6f50e839792776b96f393fcd578c7aec6911ababa5a84754b29d48cc7e3038db27fe31
-
SSDEEP
192:XD9rqykIViDL0co9FpoU8hyAr85X23X9W7yH+U5:X5++ZljHxiX9W7dU5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/859ce7250457511d1a2b79e0f6430b8e384e8578490e3f00e49490283a7091ae.exe
Files
-
04e918374a777e166f4040d0fc5371aa.bin.zip
Password: infected
-
859ce7250457511d1a2b79e0f6430b8e384e8578490e3f00e49490283a7091ae.exe.exe windows:1 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE