Static task
static1
Behavioral task
behavioral1
Sample
faf860a503e3988eae118fcce67a6c37aa321bf9c6dd450e0fe641b8ca68a3e2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
faf860a503e3988eae118fcce67a6c37aa321bf9c6dd450e0fe641b8ca68a3e2.exe
Resource
win10v2004-20231215-en
General
-
Target
28e8dc06ead687cbd4aa6f744afd7c9c.bin
-
Size
55KB
-
MD5
1044fbe38fbb36e532109327fcb5b802
-
SHA1
694312e054391c4b9cbdf5f17562501a0bced5d6
-
SHA256
91c749e8fc5774bd0d1707071c09c4f6e91c36548745e1ebea7ded34157ca4ec
-
SHA512
c43ede876a0cb0d7193a26a873f7e5801e6061563f4ea45261d0fc5b46c6357b4480cfbfcee3e1e161f0511d605b9574cb819a9a51a4db8a8036768891d248a0
-
SSDEEP
768:XlIlZ6XXm/D4cK50lmZ6PcWX7JcV7UVs9wYW+c7IHQuxMbVI+YNClbEgCtS2TkRx:1+Z6XW/r44pk7x752IwFZEuEFe5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/faf860a503e3988eae118fcce67a6c37aa321bf9c6dd450e0fe641b8ca68a3e2.exe
Files
-
28e8dc06ead687cbd4aa6f744afd7c9c.bin.zip
Password: infected
-
faf860a503e3988eae118fcce67a6c37aa321bf9c6dd450e0fe641b8ca68a3e2.exe.exe windows:1 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.clam01 Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE