Static task
static1
Behavioral task
behavioral1
Sample
ca36b4b2faee3ef5cfbe935b75bc9926b6ddf5c2ab8df43e4a29e5c96bb01eae.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ca36b4b2faee3ef5cfbe935b75bc9926b6ddf5c2ab8df43e4a29e5c96bb01eae.exe
Resource
win10v2004-20231222-en
General
-
Target
2a8518bc555d20abc4ca174860dac87b.bin
-
Size
43KB
-
MD5
3b27e1af3564e3873ae3fc87233ae724
-
SHA1
20eb17003b3e49b0d9ffc6a29510e0cfcdcc4357
-
SHA256
67ae91a6ca5d15ee650d4d24c3fb8a584a2f1eed90debfe3b3159da01fd3dc37
-
SHA512
7aade82df255b1383a9b1f3c052c859bf7cc170d6836f244b8157229307b78b110f9dc17d264f634a0159f5d5f63ea8fb858682a2daa193ce8179a13b2f9512b
-
SSDEEP
768:2iWbrO6fou0FdGIMfc6jiS5jMs5/rDDCJ7MfhAG42balBqlRzuyK:pW/A/EIMfc6jiS1MsxDA7MfeGDOlYlRM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ca36b4b2faee3ef5cfbe935b75bc9926b6ddf5c2ab8df43e4a29e5c96bb01eae.exe
Files
-
2a8518bc555d20abc4ca174860dac87b.bin.zip
Password: infected
-
ca36b4b2faee3ef5cfbe935b75bc9926b6ddf5c2ab8df43e4a29e5c96bb01eae.exe.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ