Static task
static1
Behavioral task
behavioral1
Sample
972d9e6c25b7a074dcc7a3edc69d4e5c687a65509b75beb1f80bab7392759a8a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
972d9e6c25b7a074dcc7a3edc69d4e5c687a65509b75beb1f80bab7392759a8a.exe
Resource
win10v2004-20240319-en
General
-
Target
24f70e28ff9a35666c508812e977d5b0.bin
-
Size
608KB
-
MD5
1cfa8c184c787ea705b67c9e8da253fc
-
SHA1
342c769571d80cf8917ff20a3eede0d27501893a
-
SHA256
4711b6c1c0eeb7d69e4b6e850270124bbf0ea69b1dfde59261d215296477566c
-
SHA512
581ec6d0128ba22c2f21673e63b6c66a50983f0768468a27020f3652dd8493cfa9494f313b539ec506057e3b0add198cdeaa70c11fb837ee8ae54374f41b796e
-
SSDEEP
12288:yKJZT0Fn34Z+A34GreFQRMVQG/sT/8VX7/SMh5CN:9TmxU4TQR+La/UrhE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/972d9e6c25b7a074dcc7a3edc69d4e5c687a65509b75beb1f80bab7392759a8a.exe
Files
-
24f70e28ff9a35666c508812e977d5b0.bin.zip
Password: infected
-
972d9e6c25b7a074dcc7a3edc69d4e5c687a65509b75beb1f80bab7392759a8a.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ