Static task
static1
Behavioral task
behavioral1
Sample
48c08ffb5d775cc658f104dc91f823ba5f718efa9baa0938f070f1b3f6941d77.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
48c08ffb5d775cc658f104dc91f823ba5f718efa9baa0938f070f1b3f6941d77.exe
Resource
win10v2004-20240802-en
General
-
Target
3061698f92d9687f0db272a011b7233a.bin
-
Size
452KB
-
MD5
01fab69e80cc78bc6125a7a8e5f958e5
-
SHA1
dc1c7171b97c04e02e04f371f272d32ec700679e
-
SHA256
c75b43bf2ffaf5addba588c3dccc8980d74ac92fc955326612853d0a6249b0d9
-
SHA512
25cc58c1d96338c7822efa90aeeea7a8556d5e9cbb8f058e96e062e318d1bee08c0dd6ea7fc8a8e1259d610c03c404fa6aa6667ab6d8c6e355072a4ee1ac0c60
-
SSDEEP
12288:9FWTGwyEfRl0JsDXk+/0RDCkufhjoXl7KxmJLzoPI2zvh:ehHDXADlXl7KcUPI4h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/48c08ffb5d775cc658f104dc91f823ba5f718efa9baa0938f070f1b3f6941d77.exe
Files
-
3061698f92d9687f0db272a011b7233a.bin.zip
Password: infected
-
48c08ffb5d775cc658f104dc91f823ba5f718efa9baa0938f070f1b3f6941d77.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ