Static task
static1
Behavioral task
behavioral1
Sample
66a16faab290b3f65a36bc7106dcf54c77ec9e2a086285d9c3144d97874956d7.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
66a16faab290b3f65a36bc7106dcf54c77ec9e2a086285d9c3144d97874956d7.exe
Resource
win10v2004-20240508-en
General
-
Target
67bea3930b391981b73ff7d4d47bf6aa.bin
-
Size
614KB
-
MD5
90ac9624f8c2b7b77b2f8e8837547cae
-
SHA1
aced9e838be87f8137e4aaf3f87a6bf0b7a2c330
-
SHA256
e3a0a2ff83beaa36ef32cbbfe5c71d17dbc99653d21db4bbfabb0f4201466417
-
SHA512
e0311aa7daf44f5c529e2d6eeee69d10d7acd4f6eb0ea04e8b16095624b85afb8d3f79487141ce2bedc6b461839975ad604f5fcfe81fbb70fad0d78a749b44d6
-
SSDEEP
12288:lATvdmWZFXyQ8UZtBmu4druR5oXhkYiVXZu4f5nvSj9D3prpCg//4+wmf:mTvdmCFioEu4xuoXhkTVDhvSj13prqnI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/66a16faab290b3f65a36bc7106dcf54c77ec9e2a086285d9c3144d97874956d7.exe
Files
-
67bea3930b391981b73ff7d4d47bf6aa.bin.zip
Password: infected
-
66a16faab290b3f65a36bc7106dcf54c77ec9e2a086285d9c3144d97874956d7.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ