Static task
static1
Behavioral task
behavioral1
Sample
ArchiveFix.exe
Resource
win11-20231215-en
General
-
Target
ArchiveFix.7z
-
Size
302KB
-
MD5
af52bca37eaf37ff429bd32cd94e25e7
-
SHA1
bf5d569ddc55eb3211ae262246360334124cad1b
-
SHA256
b303d5dd70ca1a14bd50cc6421381eac6a51ead4110530d111649d2178fd972b
-
SHA512
2199bc40b2f2530d36faf05ad179d7c85550711595cdf539f455c72c81f6d506738980d5cfa6c9ccc551e1bf8aa6b160e226207b3d49990780fd6be90b57c901
-
SSDEEP
6144:RlfN79ciFtqkkhTFMzyuMwJf6VsVsQ3It0c5KlEXG3WZLWylmatk:RlMiuJtK/MwJf4sVsQ3A5KCW3WZCp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ArchiveFix.exe
Files
-
ArchiveFix.7z.7z .ps1 polyglot
-
ArchiveFix.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 302KB - Virtual size: 302KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
NOTICES.txt