Static task
static1
Behavioral task
behavioral1
Sample
d44931a4099102cea5b0bf1748d6a446d49a87fb8f50f033d39c8463bc32482e.exe
Resource
win7-20240704-en
General
-
Target
cc82954e4cb2540f2d02af760b9a80b6.bin
-
Size
862KB
-
MD5
eb3053639a269a07a5f53923a7e00b93
-
SHA1
17b637cca94bbf88af42df5797f7ff7fe1c90481
-
SHA256
89ea5b7f7cc459269672b2404d47cbac344938a10dc5ab245026139eefdc5bd9
-
SHA512
5d0a9e4b01cb4c699deabe75c093b9c3f7ff3ee94ff9da1ee1cd47b7850f4c0480a0605ced6bdccb237577d588d874b99c63d58c6d4086fb0f95337c3ff43162
-
SSDEEP
24576:7qx+Yk00Y2UkY4p/DMyAnbtMvjNLufV272Vl48n:nYH0fm4poyeELE272Vlxn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d44931a4099102cea5b0bf1748d6a446d49a87fb8f50f033d39c8463bc32482e.exe
Files
-
cc82954e4cb2540f2d02af760b9a80b6.bin.zip
Password: infected
-
d44931a4099102cea5b0bf1748d6a446d49a87fb8f50f033d39c8463bc32482e.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ