Static task
static1
Behavioral task
behavioral1
Sample
b6c304ae01f257dab15a73e6a745bd68852181989b0e9fb88d427cb8a166fef8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
b6c304ae01f257dab15a73e6a745bd68852181989b0e9fb88d427cb8a166fef8.exe
Resource
win10v2004-20231215-en
General
-
Target
5da60a7f4dafa560440caa1a26707808.bin
-
Size
29KB
-
MD5
93aeb5b82d39be832f65c049358cc8e6
-
SHA1
c2ae2fbbc603e4aabd05286ab30f74d8b4b818bf
-
SHA256
2228c1ddf5e976b4b71fe9184434ef1b9f30065576c3b89c82f1b97647063d4f
-
SHA512
689beb122a18c1f29f7b071b09e936b37b5484e13806c2f9192f789a241d5c7cac271e47133d495423085b68ddd3dfe016faaa6f74150e790f3523d9ca1b3c49
-
SSDEEP
768:93/8G6CSiN2HXi4jkZNeKOispYhymO3yDYRvvUL:F6uUGNlOisXiD4vUL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b6c304ae01f257dab15a73e6a745bd68852181989b0e9fb88d427cb8a166fef8.exe
Files
-
5da60a7f4dafa560440caa1a26707808.bin.zip
Password: infected
-
b6c304ae01f257dab15a73e6a745bd68852181989b0e9fb88d427cb8a166fef8.exe.exe windows:1 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ