Static task
static1
Behavioral task
behavioral1
Sample
8ae762a5fa3161d847024466dd711b1b0ac70c7239d5df6d34c55f3a8aa0d853.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8ae762a5fa3161d847024466dd711b1b0ac70c7239d5df6d34c55f3a8aa0d853.exe
Resource
win10v2004-20231215-en
General
-
Target
7b0e1783907c2edbb005aa5fd4285565.bin
-
Size
132KB
-
MD5
1400eefab88e469804a17efafe1dbd6b
-
SHA1
f7dadd0dbc68af77aa6144b4ded9ff8c8aff9dbb
-
SHA256
96cff60b463698c3d62064ca82ef5f6af2aba1aefd7006fc38c5c8d790d841ee
-
SHA512
e5076bafb0bcd6690de6458aef106b9a3c4249ff8f15e26134ed42707aa17a8bea60a57d03e0492b6745f390b3b8995d4ef8e39f12103b5dae2f0ff8213ab89e
-
SSDEEP
3072:XXG3xEk/RvVtOKneOVnOFT6QLU1/Lpgd8Mxez0tZtjpZq:HQEsX2je/VgjxegZt9Zq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8ae762a5fa3161d847024466dd711b1b0ac70c7239d5df6d34c55f3a8aa0d853.exe
Files
-
7b0e1783907c2edbb005aa5fd4285565.bin.zip
Password: infected
-
8ae762a5fa3161d847024466dd711b1b0ac70c7239d5df6d34c55f3a8aa0d853.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ