Static task
static1
Behavioral task
behavioral1
Sample
c51647a198965b3e7bf8212286a4b28ac3a4aff96eb4d3da708ac27192b566fc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
c51647a198965b3e7bf8212286a4b28ac3a4aff96eb4d3da708ac27192b566fc.exe
Resource
win10v2004-20231222-en
General
-
Target
b030c548dee7bcf9cf86837036571314.bin
-
Size
1.4MB
-
MD5
70543b734c28cd2f3fb840460bde9f3f
-
SHA1
4f21875dc2e93fd186dfa8fbbce05b8ff07797eb
-
SHA256
876c526062a8d9c7f038b93e7ac79de098bb263f75380b4efb8c9ef0a41f72fc
-
SHA512
17a2ed865629f46db89ee280ce109eaae447c08ebbdb80d3c49f54b83e31c19ce8a268ada19f41c2f7d1848311f9efaf719347311fcc30a439c94ec915ea4ee2
-
SSDEEP
24576:5+Cwgjp6FVNRxv20dg/wvlfOkA42J/fj1S2bQphvDYceLYENnT1pOnwgdXHoR8:0CwUkzNj9KoZOAMMQQrvshLn5pl8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/c51647a198965b3e7bf8212286a4b28ac3a4aff96eb4d3da708ac27192b566fc.exe
Files
-
b030c548dee7bcf9cf86837036571314.bin.zip
Password: infected
-
c51647a198965b3e7bf8212286a4b28ac3a4aff96eb4d3da708ac27192b566fc.exe.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 1.4MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE