Static task
static1
Behavioral task
behavioral1
Sample
f46bd2742e3e04bdef45224ba44ddaad2d53a96e27dbdf042106ade0c91c4810.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
f46bd2742e3e04bdef45224ba44ddaad2d53a96e27dbdf042106ade0c91c4810.exe
Resource
win10v2004-20240704-en
General
-
Target
f46bd2742e3e04bdef45224ba44ddaad2d53a96e27dbdf042106ade0c91c4810.zip
-
Size
596KB
-
MD5
7a5c088acdcd607c991366e1676916ef
-
SHA1
e30263a0af4d38245c4a66e812099579d2823cd7
-
SHA256
b0ef903ca0a81e14a086a1742539d88657dec41c9097e611c51a75fa108e7309
-
SHA512
b8b0e0e93c93e654bdd479a5d19fa8ef1e0c81607cdd2386539415359e0d07a5e7afa8d544b6b0e083bca69e34c0ef8ec4afda6049ea604ed0e363171e8bfefd
-
SSDEEP
12288:pN/tpkS9DX2HyoWRrJV8abqUsdvT+r4307xFVYsBsGBFo8r2cOTmyBtAf16D6:pNVt9DX2HyoW3V8abqvF0407fVYU3F2a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/f46bd2742e3e04bdef45224ba44ddaad2d53a96e27dbdf042106ade0c91c4810.exe
Files
-
f46bd2742e3e04bdef45224ba44ddaad2d53a96e27dbdf042106ade0c91c4810.zip.zip
Password: infected
-
f46bd2742e3e04bdef45224ba44ddaad2d53a96e27dbdf042106ade0c91c4810.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ