TIvQ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ccb058d87e0b36a4707237da61542397228f48434616320d0f77d67e6ac82a26.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ccb058d87e0b36a4707237da61542397228f48434616320d0f77d67e6ac82a26.exe
Resource
win10v2004-20241007-en
General
-
Target
0f2800e7a761d58fc3d25abfce6a7e8e.bin
-
Size
882KB
-
MD5
be3f58326ee2b9a1b960bf7ec724bafa
-
SHA1
2084b3a080253bcc565d360ff9e8de03d199446d
-
SHA256
a38af00414755bb4d19e5321c5ac0df620dbbc6ca5218a8d58e7153ba27751df
-
SHA512
db3f8096c542f4bcb2b2c9759a58ce538ab32ddfc5c12fc3a7aa34611052372b9a060c25b2528738fe009dfee6278f475adeee35e05a01a167f475160aed6276
-
SSDEEP
24576:M3K7+Ezm4d1vIgE+hMYMWUd80QxDfdF2J6Nhdo:EM+Ezm4dJZE+eYS8bxDfd0J6XO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ccb058d87e0b36a4707237da61542397228f48434616320d0f77d67e6ac82a26.exe
Files
-
0f2800e7a761d58fc3d25abfce6a7e8e.bin.zip
Password: infected
-
ccb058d87e0b36a4707237da61542397228f48434616320d0f77d67e6ac82a26.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 974KB - Virtual size: 973KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ