Static task
static1
Behavioral task
behavioral1
Sample
adc6b85fbb55624cdd9a25d9634f08d3991ac60dce86c8f3ed520a88e36371fe.exe
Resource
win7-20240903-en
General
-
Target
0731d232d0af12a5320238914de6bf4a.bin
-
Size
409KB
-
MD5
1fbe10673384047d65cfcf91d5047b1d
-
SHA1
16e6f3c7e1f41f45724dcf452270b13589aae7d1
-
SHA256
da3cd4af82e24034b117f49451a61726c5f3845645be52578105d58c36b67eae
-
SHA512
d08c0fe7982b398a5b8c414570bfe239912921e34f608eff77d2730a40959b6bb085115fcc30c086366ae9fe170892bb0ba220a9fe2ae214d6c23c03c6894c9b
-
SSDEEP
6144:M5WDgacJAaSHRjkiaBUsSJhEkJF7JGRPD66Cj+V3nAr/O6N+f8n5j:RwFSGiaBQHJF7JqP26Cj+FAr0f85j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/adc6b85fbb55624cdd9a25d9634f08d3991ac60dce86c8f3ed520a88e36371fe.exe
Files
-
0731d232d0af12a5320238914de6bf4a.bin.zip
Password: infected
-
adc6b85fbb55624cdd9a25d9634f08d3991ac60dce86c8f3ed520a88e36371fe.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 404KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ