Static task
static1
Behavioral task
behavioral1
Sample
b08be63af3754f6970336f0f5c751271233d253f0195d2ed8293e50679c18004.exe
Resource
win7-20240903-en
General
-
Target
a6a9a1b63360b3ea785f6de90cdd09f12063ad19d218c25a18d6ac0b31ca0de9
-
Size
356KB
-
MD5
f979d3ea8b8b55b3b459cbd6c74379ae
-
SHA1
d98498a71f15e2b9b48c60c16e0e7caf90e0dfaa
-
SHA256
a6a9a1b63360b3ea785f6de90cdd09f12063ad19d218c25a18d6ac0b31ca0de9
-
SHA512
5d85db2b71bf5f3b7c0a09be716414b9f4af8dd9e658360e09f29d71159d2f24acc90a053c4b2238066bcd673e8e2a4ccd48cf97d3008cea0f550220e9ea0611
-
SSDEEP
6144:6c5W3P7K6t2i0zB+itODaLO/weQ+hQhe2hmHAEin2BcsUjJ6PDSANh0iXx3oER:6qAfkoDayIeQ+hkmgEyvoOEOiXiq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/b08be63af3754f6970336f0f5c751271233d253f0195d2ed8293e50679c18004.exe
Files
-
a6a9a1b63360b3ea785f6de90cdd09f12063ad19d218c25a18d6ac0b31ca0de9.zip
Password: infected
-
b08be63af3754f6970336f0f5c751271233d253f0195d2ed8293e50679c18004.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 430KB - Virtual size: 430KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ