Static task
static1
Behavioral task
behavioral1
Sample
d09f47363c21f002a615eb6476973cf907eb9c4ab16b1f9aa3909e200665ac45.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
d09f47363c21f002a615eb6476973cf907eb9c4ab16b1f9aa3909e200665ac45.exe
Resource
win10v2004-20240419-en
General
-
Target
cb1fa9b5d0509372c8299742a9a36228.bin
-
Size
372KB
-
MD5
de73d464cc06a338ab66f42799323f77
-
SHA1
0920c6a40386e2691f93825108211bdddc4a2e46
-
SHA256
92e558e20710b94f8509b9ee29fdf2bc485c369edc93b46fbb10fa40b3727b9c
-
SHA512
e2d9e29e198c0e02c83f5995c0f8539a759b29189555903ba23047835eb075c00d5e100d9b1066e866ef3b7783be3774a70b28292198cad9b74c8ab2b6f433e8
-
SSDEEP
6144:WPyERluX1v3gt3SET4trB/kzc3Ykh/L/PiMl4wlLz+AvUxbiX3HkuFZRMiX+J3bB:CyCuX1v3JrB4c3fh/zNl4wtbGuFZRz+f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d09f47363c21f002a615eb6476973cf907eb9c4ab16b1f9aa3909e200665ac45.exe
Files
-
cb1fa9b5d0509372c8299742a9a36228.bin.zip
Password: infected
-
d09f47363c21f002a615eb6476973cf907eb9c4ab16b1f9aa3909e200665ac45.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ