Static task
static1
Behavioral task
behavioral1
Sample
366e8a7d29166fac29b6e245abb3d481bfcc0682834b41fea7938a8e40f21c2c.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
366e8a7d29166fac29b6e245abb3d481bfcc0682834b41fea7938a8e40f21c2c.exe
Resource
win10v2004-20240508-en
General
-
Target
b4a1f1d95684515d346c8d9e713d2c24.bin
-
Size
617KB
-
MD5
c0e7cfe2ca96a3ed21e4297baee839ac
-
SHA1
59ca2e8a9abd2482fcbb47bbda1bb8c23ace5180
-
SHA256
96f5e25408e34526487a15c1480b2ed4b2c702347d22f9012c5b3c32f73afc41
-
SHA512
7eb5727c53ef128acb9217b6ae6e316eb83a57fd55607934a2ef3fc1f44d07510db81386ce5eb6971a82fb1d38bf3071b667693b12652a34b4ad8b9328b4b95d
-
SSDEEP
12288:sXHIXTfM8UpQB3IXSYFiXQMpneiQYGBLS3SS1Q9hrsaxhaxR1MZB0vhVo9FAih:CHILM8UpQCXQQcInyRQ3Aau/4B0vLowE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/366e8a7d29166fac29b6e245abb3d481bfcc0682834b41fea7938a8e40f21c2c.exe
Files
-
b4a1f1d95684515d346c8d9e713d2c24.bin.zip
Password: infected
-
366e8a7d29166fac29b6e245abb3d481bfcc0682834b41fea7938a8e40f21c2c.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ