Static task
static1
Behavioral task
behavioral1
Sample
04ce02cdf48d963bd8cc48f32913d844fd7de50449010af29f8918e95d9070c7.exe
Resource
win7-20240508-en
General
-
Target
05e028b2835ce3449531d1a127a1b1abb76cbad1faf00ea3b6e5081aab04e863
-
Size
623KB
-
MD5
dd21c6c8189abd2a0086c4871c87243c
-
SHA1
84724e2d8dc41905a56230c95e91f142e455efa9
-
SHA256
05e028b2835ce3449531d1a127a1b1abb76cbad1faf00ea3b6e5081aab04e863
-
SHA512
c93bf7e638719804cfbd9deddcc28bcf4b70e49132569807c92b1d3814b7aaa02763bc143e509afaef45fe8f52624f04b11815d7dcfde1451add66b1ee4069c5
-
SSDEEP
12288:USTPCQwURrdmCMtw7pqTJ1ADh0fw+kwg4Qpmpk8cojN3OEwbAjCa8KknXTECx+8:/CwDzMq7p6ADmfe54QMpkDojxONUOXTz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/04ce02cdf48d963bd8cc48f32913d844fd7de50449010af29f8918e95d9070c7.exe
Files
-
05e028b2835ce3449531d1a127a1b1abb76cbad1faf00ea3b6e5081aab04e863.zip
Password: infected
-
04ce02cdf48d963bd8cc48f32913d844fd7de50449010af29f8918e95d9070c7.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ