Static task
static1
Behavioral task
behavioral1
Sample
0477d366c3dce1723cf124fc263a85654b4454909dffcc0d325020f1187e4f34.exe
Behavioral task
behavioral2
Sample
0477d366c3dce1723cf124fc263a85654b4454909dffcc0d325020f1187e4f34.exe
Resource
win10v2004-20240226-en
General
-
Target
07e799a8194569a9c13ba0840530a3ab652af155b979fc59d29ad7cf3ac020ee
-
Size
590KB
-
MD5
25ef44dd3d08c4bf00c84604c9fff363
-
SHA1
d6e0eefca3b6d4b40db33d89fde2492410585c08
-
SHA256
07e799a8194569a9c13ba0840530a3ab652af155b979fc59d29ad7cf3ac020ee
-
SHA512
623d070147b5c8d941e12b6ed78b2d6448b2a2e26ae441487841cfda97596ca5b0958ece8a649d352df3863dfbe9ad2c72559051880d7a9e3dabb9d1078569aa
-
SSDEEP
12288:ig+fCZ6zIB9r00Wph1DhNimTJXlpacabIKqM7/rUY1R4qV:il6Z6z10ahlhNigJX/vabI5qDUGqqV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/0477d366c3dce1723cf124fc263a85654b4454909dffcc0d325020f1187e4f34.exe
Files
-
07e799a8194569a9c13ba0840530a3ab652af155b979fc59d29ad7cf3ac020ee.zip
Password: infected
-
0477d366c3dce1723cf124fc263a85654b4454909dffcc0d325020f1187e4f34.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ