Static task
static1
Behavioral task
behavioral1
Sample
7255529adb805f53e2d6d31fba0786557c0e8de210a67e8ef518e340d993456f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7255529adb805f53e2d6d31fba0786557c0e8de210a67e8ef518e340d993456f.exe
Resource
win10v2004-20231222-en
General
-
Target
7255529adb805f53e2d6d31fba0786557c0e8de210a67e8ef518e340d993456f.zip
-
Size
26KB
-
MD5
712420d19cbc2bb8b551d11ab96975f2
-
SHA1
3e419357527ae8d9592b8906f8edffffaa92bad0
-
SHA256
9768bb36e82a6b8e3ee97a625552fc2a79c1d84a40e8b53bf9e4a3a644dabb2f
-
SHA512
ceee3dae1fd462e26bfa4d069676d684b0b608a756baa6079b86577e73238214f42cd49574539210aebf465dde0b8a1400d9b8bef7ef22207b0d9b598e768f57
-
SSDEEP
768:SkiIsLoq3S80WlT6HSD1EECyumMY7gX8Z24f:SoANi8prD1EEunY7gXKf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/7255529adb805f53e2d6d31fba0786557c0e8de210a67e8ef518e340d993456f
Files
-
7255529adb805f53e2d6d31fba0786557c0e8de210a67e8ef518e340d993456f.zip.zip
Password: infected
-
7255529adb805f53e2d6d31fba0786557c0e8de210a67e8ef518e340d993456f.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ