Static task
static1
Behavioral task
behavioral1
Sample
6fed9ac910b4570ce24f3d4230fbe550f181ad5f1ab089725e3eb9f7e8142f2e.exe
Resource
win7-20240729-en
General
-
Target
166d084ca362984e8c8759c77644963e.bin
-
Size
395KB
-
MD5
6ba036ea87e0933aaa6f1ecec73a4eba
-
SHA1
26c3455ab2aff469a329770dce8a6f696d5b98aa
-
SHA256
b49c03197ae6f52862ae9bca96de93929422fe7929739d2429139b6ad108f84d
-
SHA512
dc0b26b5530d0ade08b3f6756f6f9599ad9d4f44249cd06647341e7ad05673fa877ab3d3c4ad31bcc0c8a53a458b0c14c4a749026306b6711f12db416df5dabb
-
SSDEEP
12288:+QGCh22zT9zdj65tjCFgszBpcu2KUosR3:+zCh22tBetj0gszBpcu2KU5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/6fed9ac910b4570ce24f3d4230fbe550f181ad5f1ab089725e3eb9f7e8142f2e.exe
Files
-
166d084ca362984e8c8759c77644963e.bin.zip
Password: infected
-
6fed9ac910b4570ce24f3d4230fbe550f181ad5f1ab089725e3eb9f7e8142f2e.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ