Static task
static1
Behavioral task
behavioral1
Sample
9b5230cce5bbf44aa307fc0be0a6f17cb2c3a4c60368abbe1a1fb420c29f131c.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9b5230cce5bbf44aa307fc0be0a6f17cb2c3a4c60368abbe1a1fb420c29f131c.exe
Resource
win10v2004-20240802-en
General
-
Target
b70eaa4a1649c9ad18af0767aa73d444.bin
-
Size
645KB
-
MD5
f2d4e95537cebbcf7ade278bcd646fdb
-
SHA1
e0c31e81faecd197e0dd1ebfbca879b1c0b1d752
-
SHA256
e65c1577cf17bcd3a9ccf69b3c5e09d5407231b1a83a7c5aeb8008245161976c
-
SHA512
696848e9ebef668ea4f349be656c0aa0ca3bed9cff124524ad8ec01d549b9a41879b97f21b3f844c6c49b233601d1bb70746af03c54eb52f9142c8e35720c50d
-
SSDEEP
12288:L+AP/I08JPCl1LQww2U6dDib92m/RwABhxjdWqvVY5FYMmpdzit0:LRP/I08Jy1JRdDiQopdWIEYp1it0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9b5230cce5bbf44aa307fc0be0a6f17cb2c3a4c60368abbe1a1fb420c29f131c.exe
Files
-
b70eaa4a1649c9ad18af0767aa73d444.bin.zip
Password: infected
-
9b5230cce5bbf44aa307fc0be0a6f17cb2c3a4c60368abbe1a1fb420c29f131c.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ