Static task
static1
Behavioral task
behavioral1
Sample
0897b14b57ab5f6576afc59566279f7e1a1d5843a20350db84ace52b4f5500e1.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0897b14b57ab5f6576afc59566279f7e1a1d5843a20350db84ace52b4f5500e1.exe
Resource
win10v2004-20240508-en
General
-
Target
8efd3e2253b64bd7e0b91d9bc8d81983.bin
-
Size
621KB
-
MD5
0c93e813f095aafe47b04910c285647b
-
SHA1
a8e30274de48ea31995c55e0363691c109f1d664
-
SHA256
cbd9d97751a09f862e196140da355f28f76142bbe6a4cc709ee2c9a4eaea6cd7
-
SHA512
f4e0e1a219ad8682f3346007564b10ebfb77eb9e8e830175e0ac8fe5127ff0e5c8e13f438f6064181d5d8a8f898fcf73b90b1ecba902e8b0c17f1f01821a18ec
-
SSDEEP
12288:gWnM0b3Rgo1Hth/eb84TPAL9rHRdq7juQG9ffb1mIxOGQHzUmI5ucBHfQ:VI8A+9rxdqHuNXhmIxOlTmucBHfQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/0897b14b57ab5f6576afc59566279f7e1a1d5843a20350db84ace52b4f5500e1.exe
Files
-
8efd3e2253b64bd7e0b91d9bc8d81983.bin.zip
Password: infected
-
0897b14b57ab5f6576afc59566279f7e1a1d5843a20350db84ace52b4f5500e1.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ