Static task
static1
Behavioral task
behavioral1
Sample
8dde30758858d57f13eb246cf15ac561619b3dc0dd7ce9973e8009d29ee40786.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8dde30758858d57f13eb246cf15ac561619b3dc0dd7ce9973e8009d29ee40786.exe
Resource
win10v2004-20240802-en
General
-
Target
771f9e5bef08285e877899a60a1e6746.bin
-
Size
814KB
-
MD5
76f1a17d09c42bb5acd94e9286f0c722
-
SHA1
040fc5d089143d16ee0cde64b0c35053ea555810
-
SHA256
823d5d099aeca1913d5250e5ab7b5a3a26a0cfc611adc763b7ad196f9d0de454
-
SHA512
ee5c0770eca0d38b9c1ecc05d7930af5a17ad4f9f7d05229048334c65507229942a37961988d5fb0c09fc5dccd6487d1f4af1e146efa859967f5364839bc375f
-
SSDEEP
24576:NLbMpveYmQtyM17l+ULt4yNHQxRw9Zh5Q4i6:NsNRmQM0xBWyRgm9v5QR6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8dde30758858d57f13eb246cf15ac561619b3dc0dd7ce9973e8009d29ee40786.exe
Files
-
771f9e5bef08285e877899a60a1e6746.bin.zip
Password: infected
-
8dde30758858d57f13eb246cf15ac561619b3dc0dd7ce9973e8009d29ee40786.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 886KB - Virtual size: 885KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ