Static task
static1
Behavioral task
behavioral1
Sample
cc497c220b5673c45be096f6bc190f13f969a87f47f501920287279c19e9a29b.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
cc497c220b5673c45be096f6bc190f13f969a87f47f501920287279c19e9a29b.exe
Resource
win10v2004-20240611-en
General
-
Target
1132b8674726c8a450403a7d7a6d2b54.bin
-
Size
607KB
-
MD5
3d5422b98b605db4d2c41fad918603e4
-
SHA1
0f93af25338b75b09161b347605e8e454c71b43b
-
SHA256
ca9c03392f6ac600e8bb49f07cc89af86c8ccf9aabe7f3b9d391793c68fe6166
-
SHA512
c99e4ae5fa5d45f2d9e152cdded4b98db9035279aab7c8ca9618226fb9d06f26f26c339807f1913dd31f68134e2cfdd3c88b50ba70268a82c7da1cc6d002b71c
-
SSDEEP
12288:U3OStjuei02ho4a6Izut2jGTBqgvSXaW69a5dMEcw1UUW:U3OStjri0X6Ftqgvyr1AuUUW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/cc497c220b5673c45be096f6bc190f13f969a87f47f501920287279c19e9a29b.exe
Files
-
1132b8674726c8a450403a7d7a6d2b54.bin.zip
Password: infected
-
cc497c220b5673c45be096f6bc190f13f969a87f47f501920287279c19e9a29b.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ