Static task
static1
Behavioral task
behavioral1
Sample
14b67f3273192e061b04c05bb81aea8794f58a856b762006fb2359f55230327c.exe
Resource
win7-20240221-en
General
-
Target
d8cec9abef1a3d395031b4528a39203f.bin
-
Size
649KB
-
MD5
e5309c926e47b44983f124e999bdf53b
-
SHA1
cda221545cc94975d395696e1035c27266190376
-
SHA256
023f4855c01dcd2aca372dcd65b9965c818e9eedda1bbb96d3c14a80c00a6256
-
SHA512
01c1b2a014541f7cbc77b03429c5fc10d895143594957b24417ecc446ee72461f5569cf73255a6199b6645a6a72981c3f8a805e3bf312029b910d0c46904e474
-
SSDEEP
12288:1GD19ulm0v6CkmTrA7L/127WUj0Zto2sr9081FeinSTQs7rl:18ellVT4L/1yjAvA9PnD2rl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/14b67f3273192e061b04c05bb81aea8794f58a856b762006fb2359f55230327c.exe
Files
-
d8cec9abef1a3d395031b4528a39203f.bin.zip
Password: infected
-
14b67f3273192e061b04c05bb81aea8794f58a856b762006fb2359f55230327c.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 664KB - Virtual size: 663KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ