Static task
static1
Behavioral task
behavioral1
Sample
e8337caecb446835a9104cbc6bccf21fb76c0ab31a285a5e2049be0b1a6bc273.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e8337caecb446835a9104cbc6bccf21fb76c0ab31a285a5e2049be0b1a6bc273.exe
Resource
win10v2004-20240508-en
General
-
Target
3d62e0fc4fca8100b42897e70a53d231.bin
-
Size
693KB
-
MD5
e12df0aa4db693b1730881c1129eb11d
-
SHA1
b6e8cb1ef6a38aa7fa8d8a34b5f67cee32b40472
-
SHA256
a4c39abca099faf03ed62fccf476d4b114798afafc3bf89a657c0efd407a71bc
-
SHA512
43c35314461975664da96b79253f03d7b7cc69348227048b4b3eb97935fff8788ad732e83b1bbd3f644f946ad4237050a802a0ca72f4643f7f3a1e832903bbb4
-
SSDEEP
12288:/TAQ/lEaZai2F/+4xBBeG/WXPBFqzgc+/rKuse9/BD9xNHXkc3:/TAclNciEQlLcnC/B9x5kc3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/e8337caecb446835a9104cbc6bccf21fb76c0ab31a285a5e2049be0b1a6bc273.exe
Files
-
3d62e0fc4fca8100b42897e70a53d231.bin.zip
Password: infected
-
e8337caecb446835a9104cbc6bccf21fb76c0ab31a285a5e2049be0b1a6bc273.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 718KB - Virtual size: 716KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 168KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ