Static task
static1
Behavioral task
behavioral1
Sample
ad86a9aa104fbe73a131bc1bf1619eddc5b4a338c3b1667269d2700c9658ae72.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ad86a9aa104fbe73a131bc1bf1619eddc5b4a338c3b1667269d2700c9658ae72.exe
Resource
win10v2004-20240226-en
General
-
Target
b835140a0b3cadedcafb1fc9b885bc5915e11793f0146abb3e1dcd49bcf439d5
-
Size
54KB
-
MD5
e63b9f190c175eb570e35a4777bb3f46
-
SHA1
06a4572138a5e1a9fef323e86602fda0a121398e
-
SHA256
b835140a0b3cadedcafb1fc9b885bc5915e11793f0146abb3e1dcd49bcf439d5
-
SHA512
323d49ada64789e50c56d9686b721c0524f4c0bdcac3e65fc926862a8ea6563c83837adbe8240eb1f90b68d2cd6a23854d1e5cf7a39ce59684a95c00e1a880c6
-
SSDEEP
768:NrPmJJopDQl4GEmHF3SKpXGXtDMsc5tqy2sE7m51p7aY/JjvbiOJ6Vr0neDPb0Lv:xPoWgFC8We3qCz51AYl80eDP/yQA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ad86a9aa104fbe73a131bc1bf1619eddc5b4a338c3b1667269d2700c9658ae72.exe
Files
-
b835140a0b3cadedcafb1fc9b885bc5915e11793f0146abb3e1dcd49bcf439d5.zip
Password: infected
-
ad86a9aa104fbe73a131bc1bf1619eddc5b4a338c3b1667269d2700c9658ae72.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ