Static task
static1
Behavioral task
behavioral1
Sample
outlookgen/main-packed.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
outlookgen/utils/packagepwd.js
Resource
win10-20240404-en
General
-
Target
Outlook Gen [1.0.0].zip
-
Size
30.0MB
-
MD5
eeaf4077f7ad14a730b8e11ddacb5379
-
SHA1
11afc135485ed57f1221b14bc18c814418d5b11e
-
SHA256
15987d23699bb09a42a53d31d37eed89a61891b88605104e6d7dc8251079faab
-
SHA512
591eee5d72313c5f3571861e0c617a3f5ffe8472195abf299001db7de750ec08ffae3ab028ce8eb4df1cfb0a95af0d2f4e3c1265f5796d9d55c03185be2cc156
-
SSDEEP
393216:LJD5qivR9e4Q0L2twDKbVKcCLaIWJAM295bnmQEnGsAJQacI9/dAjWz7Ay4CU2nO:VVl59fS6DKb8cA+fznGZNdJqCOXze2j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/outlookgen/main-packed.exe
Files
-
Outlook Gen [1.0.0].zip.zip
-
outlookgen/data/config.toml
-
outlookgen/main-packed.exe.exe windows:0 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
bodysh Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bodysh Size: 91KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28.0MB - Virtual size: 28.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
outlookgen/utils/packagepwd.js.js