Static task
static1
Behavioral task
behavioral1
Sample
a60e8f372f54d47394a2091f56649707f1a0fffadb0afc3600f8ec103ff53d6e.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a60e8f372f54d47394a2091f56649707f1a0fffadb0afc3600f8ec103ff53d6e.exe
Resource
win10v2004-20240508-en
General
-
Target
55add9ff54d73e7668ffab7b2a37fbced14a387ff913e6dae0922ced2be79b36
-
Size
609KB
-
MD5
3a4191d926e441bdb71c77471573d94e
-
SHA1
cccf0a784e4ce5a7ee004a9c11b31373a787edf2
-
SHA256
55add9ff54d73e7668ffab7b2a37fbced14a387ff913e6dae0922ced2be79b36
-
SHA512
f5d5a0aa9007bf0a4754f16418308cb139f409e765d9ce30aff7fc5fbf3ab2a94eea72eefbebbbd2333ccdbecd6464e485e9d1b55475554fc3d44f838eb456ec
-
SSDEEP
12288:Aex4IXyDRIIpt68pFyGqrfzIHiz0wS0jlBXYp7Cbf5er+Cl4cvyJ:DxbyDRIkQ8p4TVzZVlBXsubfWlRyJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a60e8f372f54d47394a2091f56649707f1a0fffadb0afc3600f8ec103ff53d6e.exe
Files
-
55add9ff54d73e7668ffab7b2a37fbced14a387ff913e6dae0922ced2be79b36.zip
Password: infected
-
a60e8f372f54d47394a2091f56649707f1a0fffadb0afc3600f8ec103ff53d6e.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ