Static task
static1
Behavioral task
behavioral1
Sample
095a10fc0b992d28fd110516164eb608316a7d2bded28a2e0bd7aa66e895197c.exe
Resource
win7-20231129-en
General
-
Target
f1de359b4cb3e98d01e03f7f4aff75d7.bin
-
Size
402KB
-
MD5
9752d28b90893e2bd76b05971c58b75a
-
SHA1
1f889f691bd02db5ffed86abca5cdfd7b1e90404
-
SHA256
e93c4702102c706307aeabeca875606b5d63bf85442062622cc2d75eade3590b
-
SHA512
d0e654c8a373a04b6065879534246b2567c2f2b39854a862ea92721813edb87e0f9fcd346ade5320a4e2fc4345b7c296df6c43c5758b91a7343b232a8b9e0046
-
SSDEEP
6144:pmxbOW+MrjHcQuBSKhD+a43ne+lA/Ro1dfYP5N1zuPlcOzu0Bl1QYn4lAam5:Mxv3ZzKhDU3nQgdwP5NtFSu0Bfd4X8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/095a10fc0b992d28fd110516164eb608316a7d2bded28a2e0bd7aa66e895197c.exe
Files
-
f1de359b4cb3e98d01e03f7f4aff75d7.bin.zip
Password: infected
-
095a10fc0b992d28fd110516164eb608316a7d2bded28a2e0bd7aa66e895197c.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ