Static task
static1
Behavioral task
behavioral1
Sample
8725ff6e087677146608c0870351439a37ab82a731647ce7ec30e98dacd7ff23.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8725ff6e087677146608c0870351439a37ab82a731647ce7ec30e98dacd7ff23.exe
Resource
win10v2004-20240412-en
General
-
Target
6c233d17929af3b2fb71d190e4f616fd.bin
-
Size
220KB
-
MD5
651798cd4a660f3c3b20d7908c0a97a0
-
SHA1
f7f9bfcf69cfb637d2b92ffdb7d7e7599d34c0ee
-
SHA256
79fa9f66c4eff08b36c54c1a1ed164548a3a6c86ae5e542a6c8b6b50572c6e0a
-
SHA512
a4666d988a8a5970a073a1c2de31e2acf18057ae7f74a7d6bce9210eb9bc056da1ab74628b5866fba3afff7660d58a98f50c9ad8953f9181a4aaf0626f5b4ea6
-
SSDEEP
6144:4eukEAf6GnuhTtnnhfWm7GBS73Vk9RJ53n4CS32f:42EAiGuhhEEpyJn4CS3K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8725ff6e087677146608c0870351439a37ab82a731647ce7ec30e98dacd7ff23.exe
Files
-
6c233d17929af3b2fb71d190e4f616fd.bin.zip
Password: infected
-
8725ff6e087677146608c0870351439a37ab82a731647ce7ec30e98dacd7ff23.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 479KB - Virtual size: 478KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ