Static task
static1
Behavioral task
behavioral1
Sample
79d6bbd408fa231a9ed7d24b4dfad0e46c4c9f568deaac3424b37e2d8a1d3251.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
79d6bbd408fa231a9ed7d24b4dfad0e46c4c9f568deaac3424b37e2d8a1d3251.exe
Resource
win10v2004-20240412-en
General
-
Target
e43faaee4f33af47b9b5fefdfa1aef77.bin
-
Size
688KB
-
MD5
fe596bd99b35dfbad7da2b23cb3bce8c
-
SHA1
f4afcc4d0efd8bd99ffe17f1665703a90b5d5180
-
SHA256
75acca5e7508dedac1138ddf3aaf77dc2e1673fbe218524b595ae25e57c4c3f2
-
SHA512
b2d4748df69c05faf8b640fa24ce3c4b2a6d3390a5b6e7d8fa128530a75deb6eacd42398984f636141b11b65c58315f9a80c30ed88df199cfbf04a6e17261b17
-
SSDEEP
12288:Lhyi0C1PWpmMoQ1CYtlxfNkHcEvKtV8xWCfedvkFOJNgIJ5L:LhCCxLMVUYtl1NyclCLMvZNgIfL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/79d6bbd408fa231a9ed7d24b4dfad0e46c4c9f568deaac3424b37e2d8a1d3251.exe
Files
-
e43faaee4f33af47b9b5fefdfa1aef77.bin.zip
Password: infected
-
79d6bbd408fa231a9ed7d24b4dfad0e46c4c9f568deaac3424b37e2d8a1d3251.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 657KB - Virtual size: 656KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ