Static task
static1
Behavioral task
behavioral1
Sample
f877b39e42932d1cb0bb2df1742c5fb492fdca752970e3397e733218d112be7b.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f877b39e42932d1cb0bb2df1742c5fb492fdca752970e3397e733218d112be7b.exe
Resource
win10v2004-20240226-en
General
-
Target
128f9907493f02c86832e77ee1baeb50.bin
-
Size
892KB
-
MD5
596c8b9a1395a305e29258091580a8f6
-
SHA1
3bafde069c968c943872bbcd5b37df16d079278e
-
SHA256
9e23f2a0db94502505450767e0f33e642aae91c8a33f0d98f643e1af9445544e
-
SHA512
e1a8be343f90202b6020705c791bfda4282d95d7bd110c1f7673b76dfe9850a664c6f37b7a8be4d181c88411057d6b81cb7557a3544979fd3afdb3b0f899b893
-
SSDEEP
24576:bJ4HAIwE2gBDx2Ll/sDu5P3M5HHndVIyhg+ofGxW:bJhQFslGu5k99Oyhgrj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/f877b39e42932d1cb0bb2df1742c5fb492fdca752970e3397e733218d112be7b.exe
Files
-
128f9907493f02c86832e77ee1baeb50.bin.zip
Password: infected
-
f877b39e42932d1cb0bb2df1742c5fb492fdca752970e3397e733218d112be7b.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 945KB - Virtual size: 945KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ