Static task
static1
Behavioral task
behavioral1
Sample
dde68755fa515158e01e3e8f2b90772dc86e25b7e2684fc5066a5e33ee22b614.exe
Resource
win7-20240221-en
General
-
Target
facf6255e4cef4e5757529e30af248dc78594b292a4753d4216b02df4be4a7ac
-
Size
626KB
-
MD5
5d6b50358d5582e8bfd16db6293b49d4
-
SHA1
115585eb24ce85cbc96186e96d83e2af7534f9ef
-
SHA256
facf6255e4cef4e5757529e30af248dc78594b292a4753d4216b02df4be4a7ac
-
SHA512
4081693f8dba663c86b864ce78f8f36abe1813e3556360fcb1271c047335bb12b96c7a98d3c8252a0938a1f78f731146f65228fdcf2258bb3e167ec97e4d2651
-
SSDEEP
12288:U974z7VcdHbz5Ar0jRSHjAMt+NWzqc3m6QW0cLXcLPZwwn9u+PoEVFkF7ngDPT:gYZMz6ojRSHjh+U++QeSJ9Zg1F7nCPT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/dde68755fa515158e01e3e8f2b90772dc86e25b7e2684fc5066a5e33ee22b614.exe
Files
-
facf6255e4cef4e5757529e30af248dc78594b292a4753d4216b02df4be4a7ac.zip
Password: infected
-
dde68755fa515158e01e3e8f2b90772dc86e25b7e2684fc5066a5e33ee22b614.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 629KB - Virtual size: 629KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ