Static task
static1
Behavioral task
behavioral1
Sample
612300066252c3151883d30f69a9b287c323a4a484a35ca553c5a73d3f7d0cfc.exe
Resource
win7-20240221-en
General
-
Target
666b5db1f0816eebf1ce57db45e2b794964a8525703aff99ab641ddf528cc0da
-
Size
398KB
-
MD5
80ed2ba902f81245754fd51e10993191
-
SHA1
744d9c9f66859423bb49ed764453e97cda0a793e
-
SHA256
666b5db1f0816eebf1ce57db45e2b794964a8525703aff99ab641ddf528cc0da
-
SHA512
2f1c2130e9abd4fd19312c78c8a08bf117ce5196dd50f33550cc98af671787bfae825e5ef476ea29dd0e8f74bb24ddbbe01c777292d43bc2e5de91bacd3a8237
-
SSDEEP
6144:Ta/EeAczUH3+WX8ZFZ0Cdb3/4/+/2fTEAuLLwfXCfVyPzVnz3cTxPhnShaVzUNrz:TwADHuWX8ZpKS2ADfwvEEr1jUP1ShwLW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/612300066252c3151883d30f69a9b287c323a4a484a35ca553c5a73d3f7d0cfc.exe
Files
-
666b5db1f0816eebf1ce57db45e2b794964a8525703aff99ab641ddf528cc0da.zip
Password: infected
-
612300066252c3151883d30f69a9b287c323a4a484a35ca553c5a73d3f7d0cfc.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ