Static task
static1
Behavioral task
behavioral1
Sample
Official Installation File.exe
Resource
win7-20230220-en
General
-
Target
Official Installation File.rar
-
Size
5.1MB
-
MD5
cab84e88acba90746745a0a8d2e45f08
-
SHA1
403aa8895158c622a4198393b1f2ac101be59ec5
-
SHA256
dc51a6732f6cb59432febe0eabd74179f8cdd145ff617fb957f0666db1899ecb
-
SHA512
1c532e1cdccd954aa579c46b94a643c63b5c2943f3d00cfed587cbed81af929b522a0c63a505d46416024a0f51272f6588a1c194542d2a3b8e16cfa101739433
-
SSDEEP
98304:QaNEA5k2YhZYVgyd6nUVr//2yL+kdsFXOjRQjnlOGrJo4Zxa1tUCyQQ5FPI:vN35kXhZ5ZnUVrdqlXFo47a1tUcQ5FPI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Official Installation File.exe
Files
-
Official Installation File.rar.rar
-
Official Installation File.exe.exe windows x86
Password: 9cns#GH714j@
e650c6140772e5e7d7f9ebd43a7e8a6a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
memcpy
wtsapi32
WTSSendMessageW
user32
MessageBoxW
Sections
.MPRESS1 Size: 5.0MB - Virtual size: 12.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE