Static task
static1
Behavioral task
behavioral1
Sample
48cd145349ebdb8a3728c8c55b9e5a59df2ee7676a847afa340d7f88ae24cfd1.exe
Resource
win7-20231129-en
General
-
Target
7d5053287343d71bf9e3b913d4e4e551.bin
-
Size
419KB
-
MD5
f2dcc50bd23d11b299989692cf430055
-
SHA1
80c99b81e3af83fe9066bfff9a97fa0d3f443e85
-
SHA256
7fe8e4a32128aef7551bf450c770982d4756f838ace3cfdb393001600dcf88a0
-
SHA512
a9fa60f84b0d735139b24265cee4dfaba88e0ee117bf689152c417d52eb6fd2aa112140cd52c02bd91d626d4436d3f95a60a88f3d2be1a1edf5873be1cdf43fa
-
SSDEEP
12288:j5/G2Sy2NJHQ7yPHPYPPmMDN/GXZ3ACEW3JajUbU8:VbkJw7yPHPYPuMDYJb3DQ8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/48cd145349ebdb8a3728c8c55b9e5a59df2ee7676a847afa340d7f88ae24cfd1.exe
Files
-
7d5053287343d71bf9e3b913d4e4e551.bin.zip
Password: infected
-
48cd145349ebdb8a3728c8c55b9e5a59df2ee7676a847afa340d7f88ae24cfd1.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ