Static task
static1
Behavioral task
behavioral1
Sample
415f5fa648158c6b38db8c701b39159a4b5eef7ec174616fd9204b2ea96a48f4.bin.zip
Resource
win10v2004-20231215-en
Behavioral task
behavioral2
Sample
415f5fa648158c6b38db8c701b39159a4b5eef7ec174616fd9204b2ea96a48f4.bin.zip
Resource
win11-20231215-en
Behavioral task
behavioral3
Sample
415f5fa648158c6b38db8c701b39159a4b5eef7ec174616fd9204b2ea96a48f4.exe
Resource
win10v2004-20231215-en
General
-
Target
415f5fa648158c6b38db8c701b39159a4b5eef7ec174616fd9204b2ea96a48f4.bin.zip
-
Size
2.1MB
-
MD5
741263a3d7863b29c493f348441dfd28
-
SHA1
b7d0d3539308e117e97ecf222ccea7aa3a62cbac
-
SHA256
539e86dc4bdd96cc46f73d706fe6434a032aaf2abecb1860c53ea573e4a488fd
-
SHA512
7748d4babd6cb58b3e979d86488806942a1651692a87f3c25180852fc99d71cd9e1046889a47e9a971d2e961eab44665eab34c4a3189b3472d2da99c94fbfcd5
-
SSDEEP
49152:35uQmkgV6+5FwNIkrm7bq9qFeD1CFt6m+DzIJYJ/53Et1:35uxLV75Fw8fyqFSgTQvo1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/415f5fa648158c6b38db8c701b39159a4b5eef7ec174616fd9204b2ea96a48f4.bin
Files
-
415f5fa648158c6b38db8c701b39159a4b5eef7ec174616fd9204b2ea96a48f4.bin.zip.zip
Password: infected
-
415f5fa648158c6b38db8c701b39159a4b5eef7ec174616fd9204b2ea96a48f4.bin.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ