Static task
static1
Behavioral task
behavioral1
Sample
a2692baba867417cdb7c2a5b1c1ab8eec75a0359962872fdd218f844e836f265.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a2692baba867417cdb7c2a5b1c1ab8eec75a0359962872fdd218f844e836f265.exe
Resource
win10v2004-20240611-en
General
-
Target
2fa23a2e93b10ae07013e24692f35b6d.bin
-
Size
609KB
-
MD5
628024cc9d07def7f972cef181ceb59f
-
SHA1
32260ddc49dd629db27d6f14636179b6bff5a056
-
SHA256
b91efae02550a1811e1607d91ede6b23bc5aad062a80518c1b969ff4d4413228
-
SHA512
98febd7d48bcddff70fabc80e18051d19a83869268ee8e64c412cc8f2bbe35454e2c10cccd8d9187ccc947b84b7526c389e0680e5e6be9fab8786db162d1b9be
-
SSDEEP
12288:3IOlfIhGZFpRJfcIG0FK/4l169t3FNHscteULKsKf:YYfWGNjxLf1mKpULKsg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a2692baba867417cdb7c2a5b1c1ab8eec75a0359962872fdd218f844e836f265.exe
Files
-
2fa23a2e93b10ae07013e24692f35b6d.bin.zip
Password: infected
-
a2692baba867417cdb7c2a5b1c1ab8eec75a0359962872fdd218f844e836f265.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ