Static task
static1
Behavioral task
behavioral1
Sample
4.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
4.exe
Resource
win10v2004-20230621-en
General
-
Target
4.bin.zip
-
Size
342KB
-
MD5
a7998be11f144f8d03b3b5b450db7efe
-
SHA1
2096f48e542325b88c56d94d7f710235041310d5
-
SHA256
c520d2381acc72509c87fae5bc6c6439cfdbcb85d68e35f386a5dbb626814d21
-
SHA512
661b0e9f757ff382bcd03fefdc981628491ebff055955afa30eba13ed8be8fbcff640ebc145ca60fe658cdb9d2aea43cd3ef926ce87774ca927c69bbd366e512
-
SSDEEP
6144:9zBLTFYgk8snuvEPAFQFRqqqHggIEmlxNMlBLuYCQHYa51mXxT0+SIblvONmSW:3FYgk8d8PAFuRRqSX3YaM964+SIhYmN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/4.bin
Files
-
4.bin.zip.zip
Password: infected
-
4.bin.exe windows x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 40KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.AAAAB Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE