Static task
static1
Behavioral task
behavioral1
Sample
aefcd0d7f28894a4bbd799439e2a31234c5d52fa0ba9c53e976ce00e80591289.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
aefcd0d7f28894a4bbd799439e2a31234c5d52fa0ba9c53e976ce00e80591289.exe
Resource
win10v2004-20240802-en
General
-
Target
4fd7522d18f85f77332c3c57373672a9.bin
-
Size
738KB
-
MD5
da767f7f4c63d122a178180ed49ccf8c
-
SHA1
2ad09a3932af2b4ec11653265b35f3c9a08afb79
-
SHA256
4314e25f13560a6b4c7df4de22e1f3739d49f401cedc39ead7fa9c6a135c0862
-
SHA512
948bd318b39c769979f1a07d73f99a1ce183d211a9174bdd5c1e74238320518f93ab1666487281260ec4278bf525a4657044465e4dd870db11d07a14493a5c86
-
SSDEEP
12288:IoFHEYG1Bk9NGymM9NQ4adbNnjNhIX7+2CyJnCDb39kZkRU/Gwsvxm8IbrmF+O:IeHe11g0nCvCyJW3ykG+9vlIbqL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/aefcd0d7f28894a4bbd799439e2a31234c5d52fa0ba9c53e976ce00e80591289.exe
Files
-
4fd7522d18f85f77332c3c57373672a9.bin.zip
Password: infected
-
aefcd0d7f28894a4bbd799439e2a31234c5d52fa0ba9c53e976ce00e80591289.exe.exe windows:4 windows x86 arch:x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 848KB - Virtual size: 847KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ