Static task
static1
Behavioral task
behavioral1
Sample
9f081f0f32e40b2a8079d05f5177f8edbd1ad58a60c18ddb705cc7609af6b8b8.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9f081f0f32e40b2a8079d05f5177f8edbd1ad58a60c18ddb705cc7609af6b8b8.exe
Resource
win10v2004-20240412-en
General
-
Target
69074e18625bcb3270a3a19946cddac04c79a5f0d1bd9111aa48d5d5aa72aa43
-
Size
13KB
-
MD5
4bd18d6668e876c89f68c06e3800a15e
-
SHA1
51e072c38bc77fd1c447ba2661a06e4993940463
-
SHA256
69074e18625bcb3270a3a19946cddac04c79a5f0d1bd9111aa48d5d5aa72aa43
-
SHA512
c091e75fc7abe2d740006f53f8890e79836e55df04e9c8a49841513780fe1b872f4a0f89aa86e6bc98a9e5c1d95fdbbcc66842c46860b865892bcdcb05a3b6db
-
SSDEEP
384:569XBbxF4oAtmqAhOB3CuZhtBXC1/sj3ml:w9XBbxeBtkhQLhXUz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9f081f0f32e40b2a8079d05f5177f8edbd1ad58a60c18ddb705cc7609af6b8b8.exe
Files
-
69074e18625bcb3270a3a19946cddac04c79a5f0d1bd9111aa48d5d5aa72aa43.zip
Password: infected
-
9f081f0f32e40b2a8079d05f5177f8edbd1ad58a60c18ddb705cc7609af6b8b8.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ