Static task
static1
Behavioral task
behavioral1
Sample
b120727ce78f5de370b91e1f0016740d3e9d57a105b54c4e265e94db40c045ef.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b120727ce78f5de370b91e1f0016740d3e9d57a105b54c4e265e94db40c045ef.exe
Resource
win10v2004-20240802-en
General
-
Target
95c51c6dc018281130ce62629f0ad475.bin
-
Size
273KB
-
MD5
aa735d1252584f2ae73865827e877dbe
-
SHA1
2bb8b1ba4879a49734eef4ea2322e2f7b5128175
-
SHA256
fc7016d8c0ea3e695c19dfc8125457605c5bcf754265e45ba8e2e2ed1856a99e
-
SHA512
5ddd77ee5269c5662927f87e207d887a1c46d12b9c21684c2c6d9f5123171da365918698a4186fc6380fa0c1819d9c9e32dce1f141ba101374fdaef1d7d7dedb
-
SSDEEP
6144:0m40CCKLQIrBLXgncNKEqvjdG/GATTNNFy8H/WI:0WKhBkmKEqvxGeATMU/z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b120727ce78f5de370b91e1f0016740d3e9d57a105b54c4e265e94db40c045ef.exe
Files
-
95c51c6dc018281130ce62629f0ad475.bin.zip
Password: infected
-
b120727ce78f5de370b91e1f0016740d3e9d57a105b54c4e265e94db40c045ef.exe.exe windows:6 windows x86 arch:x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 275KB - Virtual size: 275KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ