Static task
static1
Behavioral task
behavioral1
Sample
f0f556c5c015b66dae84e587e1c2735c532d4b1702e694838f7a66557be58ac4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f0f556c5c015b66dae84e587e1c2735c532d4b1702e694838f7a66557be58ac4.exe
Resource
win10v2004-20231222-en
General
-
Target
b5ee067743155c953eb9b6426ede5062.bin
-
Size
780KB
-
MD5
4c00fd0f413ea1a1d1f65c06a53ce34b
-
SHA1
fe0d2bdbc1a81d51787f6493818150fcc7396597
-
SHA256
74c6f240e2155ef7e20d2fb7fb31243b0ec4c061961cb1ada6f70593986f799c
-
SHA512
e336049a5bc750431c65acee5a83165be6bc385cc647342517bbd49190d00415ab292222feb8b544b05f7c6716f95d6c0726d6e13bfceb351fc9f4ce8e7d41e3
-
SSDEEP
24576:Vc6sD8KPM6YYYHBkzGhSbfVzOD1nzu9JWSqy+7rex2T:Vc6sQKP7YYNGhSbf1ODgDWSf+7r3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/f0f556c5c015b66dae84e587e1c2735c532d4b1702e694838f7a66557be58ac4.exe
Files
-
b5ee067743155c953eb9b6426ede5062.bin.zip
Password: infected
-
f0f556c5c015b66dae84e587e1c2735c532d4b1702e694838f7a66557be58ac4.exe.exe windows:6 windows x86 arch:x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 143KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 26KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 618KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE