Static task
static1
Behavioral task
behavioral1
Sample
dd800fe37bd83d32af883569057359bc3465b136e77783212bcc0a11c7de38e9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dd800fe37bd83d32af883569057359bc3465b136e77783212bcc0a11c7de38e9.exe
Resource
win10v2004-20240426-en
General
-
Target
487fcc8992b8e6a123556ec594815348.bin
-
Size
744KB
-
MD5
a8d2de2728a18d0625417911c8e41d7a
-
SHA1
60f2672aa8b6b31548b688d135d5f3f8bd79c0b1
-
SHA256
c14510bf4aa3a4c2746b4de929114db859a8ed0794f18e68e2da73572f4849ce
-
SHA512
22394f1784bad0002899484dd37cfb06afc4e273eea04c547432a074d2bd943e18790f159b9b7846a3f79f9204ce05e2636d11153f1ee300f199c4d135a3be7c
-
SSDEEP
12288:LZm59ZlxPLdLtSO+HNMHN93TWcNnpBK/HYjvy6XvifO34G9HOPSbu+YjL:LZYjJkOSNMHb3XNnpBK/4z/N342H6SbI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/dd800fe37bd83d32af883569057359bc3465b136e77783212bcc0a11c7de38e9.exe
Files
-
487fcc8992b8e6a123556ec594815348.bin.zip
Password: infected
-
dd800fe37bd83d32af883569057359bc3465b136e77783212bcc0a11c7de38e9.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 775KB - Virtual size: 774KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ