Static task
static1
Behavioral task
behavioral1
Sample
c26e5f4ec1a3a96dd79e4f44040d665bd2df2f36f349867ad4accf0d1a907e0f.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
c26e5f4ec1a3a96dd79e4f44040d665bd2df2f36f349867ad4accf0d1a907e0f.exe
Resource
win10v2004-20230220-en
General
-
Target
2b14e1c4580c1f68761cdb17b6b867b8.bin
-
Size
924KB
-
MD5
240c09ceb89413ff13f21b6479ef8ebc
-
SHA1
3d322e646ae92bc6dac3f7bbf0948a3363ef4089
-
SHA256
a913d9992b113d430839b942958404d2953690a181fa637623185ee856eaf6fb
-
SHA512
55ba69802dd39e99d01ba85037b42ee979b29f715ed6277ec149be679994b518501e9891ea27da2af2ab2955cae68a96a5413320eb8f97b69151605885ca9dce
-
SSDEEP
24576:NTiSZ5Gc0Qf+SIWskrTOtB7K2ztEf5wxgjpwfG/lvqa/tUIMuI2:5iS70uTPsZ77JB6wSmfG/lCqOIlI2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/c26e5f4ec1a3a96dd79e4f44040d665bd2df2f36f349867ad4accf0d1a907e0f.exe
Files
-
2b14e1c4580c1f68761cdb17b6b867b8.bin.zip
Password: infected
-
c26e5f4ec1a3a96dd79e4f44040d665bd2df2f36f349867ad4accf0d1a907e0f.exe.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 228KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 688KB - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE