Static task
static1
Behavioral task
behavioral1
Sample
96cd348aeb53838ce8ba7dafb1c1959cd027b8f3f43b213ad5f2af8ecfbc0880.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
96cd348aeb53838ce8ba7dafb1c1959cd027b8f3f43b213ad5f2af8ecfbc0880.exe
Resource
win10v2004-20240226-en
General
-
Target
e5f460c00122f6acfde8d51b8760104f.bin
-
Size
776KB
-
MD5
3b5169ae47345725b822f8030ac7a7c0
-
SHA1
f67cee3ca772eb8eb946005c0f7f6c4edba041bc
-
SHA256
2ae8aed5810988a37bad759bd9d1559053787520f65fb67e5cdaf5961e215213
-
SHA512
c7e98e0584f83e3102b4ebeefb7045b87271b6636202b537b8516416b47adcf17672bdce6a298b34d7aedf50d58363e796e38a4a12c8ae7931ff8ba6550ba9fd
-
SSDEEP
24576:WYSmCGk341PUvrFaIZ9KqgQXT2OERHvBE:WlMx1PDIC9M2PRHpE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/96cd348aeb53838ce8ba7dafb1c1959cd027b8f3f43b213ad5f2af8ecfbc0880.exe
Files
-
e5f460c00122f6acfde8d51b8760104f.bin.zip
Password: infected
-
96cd348aeb53838ce8ba7dafb1c1959cd027b8f3f43b213ad5f2af8ecfbc0880.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ