Static task
static1
Behavioral task
behavioral1
Sample
237e35d7e5f71e53faa66955d912ab7c132efeb7c0259d2ad21af6d6f538d553.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
237e35d7e5f71e53faa66955d912ab7c132efeb7c0259d2ad21af6d6f538d553.exe
Resource
win10v2004-20240226-en
General
-
Target
899f3fc8c4f3584ee69c1f302eb7ed3c.bin
-
Size
780KB
-
MD5
403efc16d72368845c2f4460346e37d1
-
SHA1
9be16b804d6e4e77e370c5cd03ba7014c980ebd0
-
SHA256
584f542a0ba8ccc8c0866d6cab2f8e58919be685ca7d18ab9d4c64ab7aa64a52
-
SHA512
34acdd3e619f5f26ef6b48ebf741abdb7d20cb3ca62d55f6822279c9bcbe621025f16d431b4ef8b5a75f78ee0c77c4570fa8f3313668c850067ee332b168a836
-
SSDEEP
12288:uPjp7vJEPVHPXbfXEPRn5x8E5UeWlba04SxnQGr0v8/qY3VpJlzgZ0HJ7kAII0jm:a7v+dHPrfUPHx8E5R04In4NUpIKVO4j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/237e35d7e5f71e53faa66955d912ab7c132efeb7c0259d2ad21af6d6f538d553.exe
Files
-
899f3fc8c4f3584ee69c1f302eb7ed3c.bin.zip
Password: infected
-
237e35d7e5f71e53faa66955d912ab7c132efeb7c0259d2ad21af6d6f538d553.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 414KB - Virtual size: 414KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ