Static task
static1
Behavioral task
behavioral1
Sample
d02d1c775c3526df43c2889625839f70139be9c649ff1e84a70c40e29ad159fb.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d02d1c775c3526df43c2889625839f70139be9c649ff1e84a70c40e29ad159fb.exe
Resource
win10v2004-20240802-en
General
-
Target
900c6b0fc2bdf874176051a0c0642fa4.bin
-
Size
780KB
-
MD5
f767d21fdb0228dc83ed605f2e795155
-
SHA1
04a718e7bced106422e5f854dc8bfae0542f5e0a
-
SHA256
5e8b764fd969ca12445cc20a41d44daa58491e7f5921b342476bf9ac22f6f7bb
-
SHA512
62794601fe8b427c363e67a27b60ca821a324113ef403fe5623dea99fe3c61f4feb575ef22a6f5e960eb654e5e333bd84bff18ba6f52f90cd7bde1cb324eb0be
-
SSDEEP
12288:PqdJJRbQemm1JEQ39s26sdG64CIkTyrcdHTdYirngBkfXbdH9VvYbTGVnVpFnS:SwcQ26gaCIkTJdzdYi/1v0etS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d02d1c775c3526df43c2889625839f70139be9c649ff1e84a70c40e29ad159fb.exe
Files
-
900c6b0fc2bdf874176051a0c0642fa4.bin.zip
Password: infected
-
d02d1c775c3526df43c2889625839f70139be9c649ff1e84a70c40e29ad159fb.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 848KB - Virtual size: 847KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ