Static task
static1
Behavioral task
behavioral1
Sample
2ba23a256551d2b59785b96b6e2b79b3a1a63c3e634b6a1e2690d48c8450e80a.exe
Resource
win7-20231215-en
General
-
Target
02cc24dc1a0988f00f2e7fc8432c79a4.bin
-
Size
591KB
-
MD5
14ec69ac9c7d2645386027ec829a2180
-
SHA1
4b002c7a263d73be4479f41dd21531bdbc830857
-
SHA256
95c25abf29e773292f79560c072f9d3455e22d3f2efac0421114937e7d922841
-
SHA512
042d38b15c8988a20e62c61f828e53074302b749f04b95b8d43a379666d7eb2ac0a350c79ff0bc457c2c6a4502cc1683c063f2565ad50a41e1d7108ebbc65424
-
SSDEEP
12288:Aicc/ewmzJ8qqG/+jalBUpShmV3CLODj2JAtDFQApq+r0uQzKvZoEPMWYiyjMHxq:AbcGwmzfqG/lxhmV6On2JARFQO10gZMn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2ba23a256551d2b59785b96b6e2b79b3a1a63c3e634b6a1e2690d48c8450e80a.exe
Files
-
02cc24dc1a0988f00f2e7fc8432c79a4.bin.zip
Password: infected
-
2ba23a256551d2b59785b96b6e2b79b3a1a63c3e634b6a1e2690d48c8450e80a.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 593KB - Virtual size: 593KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ