Static task
static1
Behavioral task
behavioral1
Sample
d52dfc1ee7e81d98acca73d6fbd61fd4cb7da22d0254fdbc874ad24938f69049.exe
Resource
win7-20240221-en
General
-
Target
d0fbea90a9103cb98b1256aadd024aaa.bin
-
Size
592KB
-
MD5
92a79131a7b8345c07096b3fc708acf6
-
SHA1
ce8c399bfb97bc2f35bd4f1763d497d2fe86b0b4
-
SHA256
8c5055aa74f81912b347ba4271bb0136068f5c2b93830f9440694a5c6ea49de8
-
SHA512
e887a540b402671b93d72e4a8323c33ac971699d0e609ad9fb370b75f85c0de6abb082fc071c6700ac1b18df3ac43bda69f71afa518cb2117e0be468d1a6ef64
-
SSDEEP
12288:LFiLLDubdbyVXPRQ965y2IdCgP51Cpvc8URasuc1eUif+May5Qs:xNGVX+w5Mx+5FUDucDi9aa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d52dfc1ee7e81d98acca73d6fbd61fd4cb7da22d0254fdbc874ad24938f69049.exe
Files
-
d0fbea90a9103cb98b1256aadd024aaa.bin.zip
Password: infected
-
d52dfc1ee7e81d98acca73d6fbd61fd4cb7da22d0254fdbc874ad24938f69049.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 593KB - Virtual size: 593KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ