Static task
static1
Behavioral task
behavioral1
Sample
c1187d4230ed4f9a6f861e23633c3f704a2d57f43f54d8d9108c5596de6b9f7e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c1187d4230ed4f9a6f861e23633c3f704a2d57f43f54d8d9108c5596de6b9f7e.exe
Resource
win10v2004-20240508-en
General
-
Target
c550b68a74a014523dbd956bcd869330.bin
-
Size
543KB
-
MD5
c1d4626bbe1436a057410c1bc6226aa5
-
SHA1
a6e3cd2951e18cc79c71ee2a319ed294b25d2d76
-
SHA256
bfb2bc2f0850a5fe60f70dd080096a2892446f93bfc4cb67908ce6c6982ab621
-
SHA512
195f5daef282e49d45ed3aa4e609042787eb6473426d62275afbedc0bc093b8a4448914f19449f4e793f37abbcfd7e6b0daacf677a4bd9eaa505aec35b09f409
-
SSDEEP
12288:105BiAHYamj+96+/y2lM1g7VnSq3QpfX26EcJ6ZVIYXUgWfh+dzdJvzC6pQu6Yzf:gb4aarx1UVnSq3Qpu6b6KiXrpQ2QG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/c1187d4230ed4f9a6f861e23633c3f704a2d57f43f54d8d9108c5596de6b9f7e.exe
Files
-
c550b68a74a014523dbd956bcd869330.bin.zip
Password: infected
-
c1187d4230ed4f9a6f861e23633c3f704a2d57f43f54d8d9108c5596de6b9f7e.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ