Static task
static1
Behavioral task
behavioral1
Sample
68a2c42f5e5c03827b424e1429170d79ea0529987ec07f4a2b76ef109bb7a888.exe
Resource
win7-20240611-en
General
-
Target
70467670cda5878ec6d1670c4b395318.bin
-
Size
637KB
-
MD5
8bd2da33bbda62aa3d7eb12e01031ca6
-
SHA1
7b90b0a2d47f4c2f16e51725b948b3dffa12f571
-
SHA256
b344418eea8a870f9a03d5ae14e080736eaeea6625e252b97c1c633fc144de73
-
SHA512
3061dde22b82ed6db17c65a022f9e9ac39865a00950c502a8aa92a5a45221511db6a55d921c0fd4f85a9c2a5f3190e157261981777eaf74047ce38046d7eb57f
-
SSDEEP
12288:ddDx+iWBJ/zSAT32hJINlxdDe9O71bbAqRGDuh85lzBP9ogFDc5YIaStHH0:TDx+zJ/zuhJI/xdWO7GSy7zR9ouDc5Yj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/68a2c42f5e5c03827b424e1429170d79ea0529987ec07f4a2b76ef109bb7a888.exe
Files
-
70467670cda5878ec6d1670c4b395318.bin.zip
Password: infected
-
68a2c42f5e5c03827b424e1429170d79ea0529987ec07f4a2b76ef109bb7a888.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ