Static task
static1
Behavioral task
behavioral1
Sample
2365cb154a0eef953ad1bffeaf8ecd89781ffaec0c47b6fd57434286d8ff000b.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2365cb154a0eef953ad1bffeaf8ecd89781ffaec0c47b6fd57434286d8ff000b.exe
Resource
win10v2004-20240709-en
General
-
Target
d60597be27a8d6841f94ff60298b8496.bin
-
Size
9KB
-
MD5
0671b9bdc0b4f9d57f632b30bcf782cf
-
SHA1
8b34b9f2e109e6da105656c74c85247dba79ab97
-
SHA256
e1749a3b34317f1138077b7cabfc6952de7f6a17178aed450642878163294a54
-
SHA512
4d6a7f36c7b71824e07f45c325acfcac8faf8eafbdf8685d353a2b3556639481ffcd08ca9a8f943063e46a1cf01b4f55d040e629bf2ebf91674be55686738346
-
SSDEEP
192:YcIexu0Vb+g8n66g9+/i6nT3CUdTRkVUwadMZvnFvwQ:bxFF+g4hoQjTTRkKNMvBV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2365cb154a0eef953ad1bffeaf8ecd89781ffaec0c47b6fd57434286d8ff000b.exe
Files
-
d60597be27a8d6841f94ff60298b8496.bin.zip
Password: infected
-
2365cb154a0eef953ad1bffeaf8ecd89781ffaec0c47b6fd57434286d8ff000b.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ