Static task
static1
Behavioral task
behavioral1
Sample
d8e4c4152f9191f21cdd3439d73f387b4154c798f1ba4025ebdf1d4c09eb3527.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d8e4c4152f9191f21cdd3439d73f387b4154c798f1ba4025ebdf1d4c09eb3527.exe
Resource
win10v2004-20240508-en
General
-
Target
094b2f2a0f76e8a4320620e1d746fb00.bin
-
Size
526KB
-
MD5
2d67b5a06d88e939a37cb137306a885b
-
SHA1
fd9ea6ccc292467316b7d74037b0f70b1342ffe1
-
SHA256
ce2c964df233d3facb3ff6f1a00ce361b6bd5de5aeeb377c3cb07dd1030eb8ac
-
SHA512
31656ba77e2443267579a199fc33bb04c0df87636cd199daecd705ce6cd9dffb70c38a3657e0f40f14030bf0f509200fef1b78c232828bbab1dde6752193010f
-
SSDEEP
12288:l34z/OzwIucuYEyT5isP62diqbVs+Nnx6NqJnhjNDXo3Icnr3:54z/OkMubyT5isPzYsV7xx6qBDxoj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d8e4c4152f9191f21cdd3439d73f387b4154c798f1ba4025ebdf1d4c09eb3527.exe
Files
-
094b2f2a0f76e8a4320620e1d746fb00.bin.zip
Password: infected
-
d8e4c4152f9191f21cdd3439d73f387b4154c798f1ba4025ebdf1d4c09eb3527.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ