Static task
static1
Behavioral task
behavioral1
Sample
573d8ee9678cef8163e96937a6a5a4f14a5ade12f5646ab05550c0038c770e5d.exe
Resource
win7-20240704-en
General
-
Target
15c4948711c3ac6250ff98d0e5272b27.bin
-
Size
542KB
-
MD5
f55ddd750f885f8aa92337366be10828
-
SHA1
f9c0a46c638957ce1a1f98453dba648e5a060b7b
-
SHA256
0baef7154f809c5d606ae9e471aa52d992ccfda2972b831cc7ce0bafec11f3fd
-
SHA512
f56aec694623efd8a71092858298b3c68fc781e33645ee2529e587304c15f247ae738c9fd54eddee2ea4ed896867f91e5cd2f403197e41ea1547e6c0b95cf344
-
SSDEEP
12288:BQRrfyFtxCZAoTk1LE9tsbz+/l2GI2V+wtw3pNuiBWMr+:BQx6FmZkEEBiTkpNuix+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/573d8ee9678cef8163e96937a6a5a4f14a5ade12f5646ab05550c0038c770e5d.exe
Files
-
15c4948711c3ac6250ff98d0e5272b27.bin.zip
Password: infected
-
573d8ee9678cef8163e96937a6a5a4f14a5ade12f5646ab05550c0038c770e5d.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ