Static task
static1
Behavioral task
behavioral1
Sample
Users/0228852024/Desktop/urwtest_v18.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Users/0228852024/Desktop/urwtest_v18.exe
Resource
win10v2004-20230831-en
General
-
Target
0719a2d6ea8788d29d6b4641c40093362a674a3c6443ff095c507a30323fa6a0
-
Size
39KB
-
MD5
b2851c3d97008f8da1d292762aafcd35
-
SHA1
a3a1cd11d37982bab0f206100f5784ee2ac3f837
-
SHA256
0719a2d6ea8788d29d6b4641c40093362a674a3c6443ff095c507a30323fa6a0
-
SHA512
dd11e62e15c9102e304c3ace078545f67e5329c5b846aa9e828c9e8f6cdcdfd4a1bb518f680f0daedf69b53a9cb9808c1ad6d48bf0b058e50340e44bfa77f8a7
-
SSDEEP
768:34wxbP432C2OAfk9SCRpw+s6mmy+BihyJcZmxvAnIt0TTiEtfco/A7:oCE7qeSCRpwJ6mZhv6onIt0Hftfj/o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Users/0228852024/Desktop/urwtest_v18.exe
Files
-
0719a2d6ea8788d29d6b4641c40093362a674a3c6443ff095c507a30323fa6a0.zip
Password: infected
-
ProgramData/McAfee/QuarMeta/ab9ac64b-6d4e-4a70-a86e-0672eac3ec91.xml
-
Users/0228852024/Desktop/urwtest_v18.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
7800 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7801 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE