Static task
static1
Behavioral task
behavioral1
Sample
thoughtdeal/thoughtdeal.exe
Resource
win7-20240708-en
General
-
Target
a2ebf95bac37124b2b612a7e231035ea3c7fc53f7785802a819eb9f2867b37e1.zip
-
Size
935KB
-
MD5
e34c39e3d749383e565884542515f922
-
SHA1
ccd7411628ff8cd4d5eacd142880ae4af83313df
-
SHA256
a2ebf95bac37124b2b612a7e231035ea3c7fc53f7785802a819eb9f2867b37e1
-
SHA512
d6b8e734fd802d3107e3c3c06291d8b562c41b6edf8ff15ba2e68c81b7eca9a26dd43d0a6c7d9654433ef4a9721e94020271c3e8e855321789e78ec185ac2279
-
SSDEEP
24576:+En4BNg2w871LvMbYml0vPk11VVGnW8nBIrT4cUlxc:rnKK2w2C/H1VcnhIH4cuc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/thoughtdeal/thoughtdeal.exe
Files
-
a2ebf95bac37124b2b612a7e231035ea3c7fc53f7785802a819eb9f2867b37e1.zip.zip
-
thoughtdeal/thoughtdeal.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 957KB - Virtual size: 956KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ