Static task
static1
Behavioral task
behavioral1
Sample
3ee2f01bd6dfc229152e748471f10c2228c715449e98f81ae7e91d065fdbda14.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ee2f01bd6dfc229152e748471f10c2228c715449e98f81ae7e91d065fdbda14.exe
Resource
win10v2004-20231215-en
General
-
Target
80658043cb97ab9b1c46ce8b18c7d85e.bin
-
Size
1.7MB
-
MD5
ec8ae4166b7d5e5b59c45b6584060e0c
-
SHA1
adf7464211002c6c3d6f302d835ae543a3dba543
-
SHA256
c1cea725c72be36f4557e568c4d944e5f7f929afe7df641db726f0d1abcce7eb
-
SHA512
83bcfd76366110311dfac1384801aef3f98f763230559ad03373d3111e160197db9510edd42ab1860bc304ffb1318b7d38eb3a66faa0cc023449c01c51893188
-
SSDEEP
24576:5HneIPcXS/lXMBk8/DXd5Q7KiQOQON2HoVpYx+Ee+ByBA2WTnVhAgDDtpcrqcn66:5F9Er5iC5oYx+SyWhTTXYN6uB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/3ee2f01bd6dfc229152e748471f10c2228c715449e98f81ae7e91d065fdbda14.exe
Files
-
80658043cb97ab9b1c46ce8b18c7d85e.bin.zip
Password: infected
-
3ee2f01bd6dfc229152e748471f10c2228c715449e98f81ae7e91d065fdbda14.exe.exe windows:6 windows x86 arch:x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 492KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 80KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 28KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 991KB - Virtual size: 992KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE