Static task
static1
Behavioral task
behavioral1
Sample
0af0b4bffa67145e4e5ecd2321bb7790e9c14ed802a7984798fc7c00b6763207.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0af0b4bffa67145e4e5ecd2321bb7790e9c14ed802a7984798fc7c00b6763207.exe
Resource
win10v2004-20231215-en
General
-
Target
f05c694a114f51a3ef0db7f93f777711.bin
-
Size
4KB
-
MD5
e34e121b987b13dabbb1da11614c8dcf
-
SHA1
9f4c1021b7b7e5620ff4928fb443fa24a5f70a5b
-
SHA256
36ccfc648b2f2a034b43a16f6db8868ffc21101b59a67d4f0bbab69264b07834
-
SHA512
646120a93aaec3b4b0b7027886db8444018afac67771a9f6c21303c4a44f36684bc6cbe18067627c0884a882fc9ea7acd471ea2db7cd5460c2274c4a8fefd787
-
SSDEEP
96:e9osZ5ABZTlQo1Ag/nOhCgazyOpwF0JaIstOyX:eKsZ5AvllwWe/0JX6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/0af0b4bffa67145e4e5ecd2321bb7790e9c14ed802a7984798fc7c00b6763207.exe
Files
-
f05c694a114f51a3ef0db7f93f777711.bin.zip
Password: infected
-
0af0b4bffa67145e4e5ecd2321bb7790e9c14ed802a7984798fc7c00b6763207.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ