Static task
static1
Behavioral task
behavioral1
Sample
4f46bb9daf64768d2e348cea9b2b5381c056beafa9e7932b9c3e38349b38dcbf.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4f46bb9daf64768d2e348cea9b2b5381c056beafa9e7932b9c3e38349b38dcbf.exe
Resource
win10v2004-20240508-en
General
-
Target
a2f3b683ef9cede019ed5045ef6b66fb.bin
-
Size
591KB
-
MD5
7827180b5f77b5018d5b4a567932f1ca
-
SHA1
ec3ac80aa39b0ca1bcdc79ebd8f28825e0697cbb
-
SHA256
3c3974bd54ad748578d520b26e756faad120460f1f77de142150e2db0e941ea1
-
SHA512
e6ec39f5cebccd0b5042dd41d789c9281ac3d6ca16fb5ac3787544b582cda499b17be2359aaf93c19a0d1f1db9c787d47bc47120529753123edf4d7b219ec432
-
SSDEEP
12288:3vA5xHHb89bguwlYeeLcVDuBnThR+HWiogNde4k4O/tj7nUxbip6e/:3vZguwKeeLcVDuBnThIWiokem4tpse/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/4f46bb9daf64768d2e348cea9b2b5381c056beafa9e7932b9c3e38349b38dcbf.exe
Files
-
a2f3b683ef9cede019ed5045ef6b66fb.bin.zip
Password: infected
-
4f46bb9daf64768d2e348cea9b2b5381c056beafa9e7932b9c3e38349b38dcbf.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ