Static task
static1
Behavioral task
behavioral1
Sample
e4ba43dc277e470e668df7507af2bdb30c7bca40393e5f76a096408f1e04cb5c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
e4ba43dc277e470e668df7507af2bdb30c7bca40393e5f76a096408f1e04cb5c.exe
Resource
win10v2004-20231215-en
General
-
Target
669830989c388ee7690a4e15827ef078.bin
-
Size
1.9MB
-
MD5
25a4b1a8ce1ce839fd0eaa4e88a14053
-
SHA1
2ba16f6e1ea36b3af52b1674f7e3013531ff1709
-
SHA256
9e829c2380f16d7a0d52cface03cd804ac84b3c5d695556de26e33c95e1002c4
-
SHA512
ba7df2afb351a8188f72f44d91ae8d2e5cdd945cbc77f064dfe3a09a8951e46d499116406312d181e9aadf3b66a7fb26beb6ffb0d61d0b5fe8aebeb2b9a10d71
-
SSDEEP
49152:ijo5MxPK5Sa1X3fiYp6wLlSWhY6Ne5e+67sgOfAoFrKA2xeq:uo5CHahjb/NeU+d3rKteq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/e4ba43dc277e470e668df7507af2bdb30c7bca40393e5f76a096408f1e04cb5c.exe
Files
-
669830989c388ee7690a4e15827ef078.bin.zip
Password: infected
-
e4ba43dc277e470e668df7507af2bdb30c7bca40393e5f76a096408f1e04cb5c.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ