Static task
static1
Behavioral task
behavioral1
Sample
9b2562b80e435348cffe99ad86776e9cef9b3f2745b170f297de739ff8d55509.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9b2562b80e435348cffe99ad86776e9cef9b3f2745b170f297de739ff8d55509.exe
Resource
win10v2004-20240426-en
General
-
Target
c828227db6d7bc08dd8e9b7313a0e770.bin
-
Size
853KB
-
MD5
d7bff3d0b067da7e739c65f0291660f2
-
SHA1
d9a07e0f6a2d7976f9e8669332817093fb715328
-
SHA256
649943fbe8b8d82a47fac83c168b73056c87282ca0c4dceff304da791f10c83d
-
SHA512
ed37ae94759e3df0398c2c8d7dd0652633a15be0790899af1c687f91250fdc5aba43f7526855925b9e85c464c80dccf1a0ddf56ebe7dc3ddbfeda543e373ed62
-
SSDEEP
24576:gsIZ3AnQdCWir2CoQo6RCXk0wNLp0xUEOVyhxYi/TJKd1:gsIZxCW82CoO8gD0x7OVyhGi/FKd1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9b2562b80e435348cffe99ad86776e9cef9b3f2745b170f297de739ff8d55509.exe
Files
-
c828227db6d7bc08dd8e9b7313a0e770.bin.zip
Password: infected
-
9b2562b80e435348cffe99ad86776e9cef9b3f2745b170f297de739ff8d55509.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ