Static task
static1
Behavioral task
behavioral1
Sample
034a3732828ad09b79a12c66bf7eee3058427808bdae8b19291fffc828ee1fbf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
034a3732828ad09b79a12c66bf7eee3058427808bdae8b19291fffc828ee1fbf.exe
Resource
win10v2004-20240412-en
General
-
Target
4ac88ef7fe497d568f8c0256627f4f28.bin
-
Size
600KB
-
MD5
87a41cd3abc9638dbb16a32f885d681f
-
SHA1
311d36fc91c6f9f52f9660b78702d2c52e83ae4b
-
SHA256
7d4a6f5892c8c888a7909c29c4095580b2737c9aef3e9f96c5ef38c212f06d68
-
SHA512
481ed1ce87f9a2657d45fd78f433a7a36458c1d64352951b28b49bbb754ecbe44d9c87f89cc07e86ee0cedaae10bd3a4a35b9297bcdc8f2753ed33ccd27e5bdc
-
SSDEEP
12288:KZ+9VevcYq4ni3oRKA05ksxPZIwt46bQOyD+mPjQVLpZafSZvf:KZKovJq4YRGsvP66bQZD+IQVpvf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/034a3732828ad09b79a12c66bf7eee3058427808bdae8b19291fffc828ee1fbf.exe
Files
-
4ac88ef7fe497d568f8c0256627f4f28.bin.zip
Password: infected
-
034a3732828ad09b79a12c66bf7eee3058427808bdae8b19291fffc828ee1fbf.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ