Static task
static1
Behavioral task
behavioral1
Sample
8c0c08ab68b43dc62083f04eaf80e20c553d90b1e225523878c6685764a18e74.exe
Resource
win7-20240220-en
General
-
Target
e0b3f01e85fd6e4c059d1761ef8cc64b.bin
-
Size
918KB
-
MD5
08693498f3075aabc46315e817b64a30
-
SHA1
9ffc7abe71d2b5d6e4db505ab220aa5c6f8a20c0
-
SHA256
cbe83a6e898ccd5e03c9ff60fb80143af962e7c7edb188f4c2f06de39238c96f
-
SHA512
1aaa8e9415c562a54e3e71c231efabfa5f01931bb1b87e6febf2c1dcbbf6fe3a415410cf96f28405ffec1d9b1e06f00bc8be710bd66228027cb6ead1e8005664
-
SSDEEP
24576:dkxUP0ldUaVs2Q9bGZ8BS0mykrl79e72jVYjqg:j4bVO9SrK72jdg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8c0c08ab68b43dc62083f04eaf80e20c553d90b1e225523878c6685764a18e74.exe
Files
-
e0b3f01e85fd6e4c059d1761ef8cc64b.bin.zip
Password: infected
-
8c0c08ab68b43dc62083f04eaf80e20c553d90b1e225523878c6685764a18e74.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 191KB - Virtual size: 190KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ