Static task
static1
Behavioral task
behavioral1
Sample
74f7be7a0e6e10f0209d700876ab03eb9d37cdcab79c0def5d536eb8accbf49f.exe
Resource
win7-20240220-en
General
-
Target
0d866e84b1b42f3b924d671db5b3b40e.bin
-
Size
675KB
-
MD5
b36ee8101e3b2f30df8357bb569524fb
-
SHA1
d395f0a55310e637b026fee48f06bd2c7a2a147f
-
SHA256
cc6739443b89cd9a3d17cb7fd3139bd43c0dfaea48537c2872387ff8b544e86d
-
SHA512
2322362d7dcbab1b9c640b5372e1f5bfdb3790070fe4d0bbd95c6f14eca61eebe0bbe671e9a5f4f69009fc87287e5a22b4741ed1f137ae89495961cf6b547815
-
SSDEEP
12288:JUhZvkK7b9YKDG7LAo/cpFuXyvOXHnZvKlpOFGvG7pSe8o2tntBiXtyyewv:EttJDG70o/20HZSlVcs1o2FtEMyhv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/74f7be7a0e6e10f0209d700876ab03eb9d37cdcab79c0def5d536eb8accbf49f.exe
Files
-
0d866e84b1b42f3b924d671db5b3b40e.bin.zip
Password: infected
-
74f7be7a0e6e10f0209d700876ab03eb9d37cdcab79c0def5d536eb8accbf49f.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 264KB - Virtual size: 263KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ