Static task
static1
Behavioral task
behavioral1
Sample
5f78e94c7eabe39a9c6297db3f12ef5161d835c7c65928d990ea98c0528e04ef.exe
Resource
win7-20230831-en
General
-
Target
3b955958829c8ea45e2de001bbd7da4a.bin
-
Size
494KB
-
MD5
ac9d51ea1bfbbe7e9be61047b5ed0f0b
-
SHA1
c0586c09377be52ba3bb0cce126d16f4a6fee1b2
-
SHA256
3f7b1b4cf7c40ba31ea6b2126329fd907d852f20c9012f0f135a1598acac77ba
-
SHA512
182951363a718209d1a71e894d3215343c686f040a7b3d54c31839ee3eb680f5ef7155e2e3a25467cb93a25d8ad80b796c7c6cf1395d0b11f05dedce1250ad9c
-
SSDEEP
12288:JcfEYb7C4tcbhzMGhjL47E9m8fjGJXWKJK5ym8n7ZNlN:JcfEYaYkhfKE7mW4K5b8dNlN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/5f78e94c7eabe39a9c6297db3f12ef5161d835c7c65928d990ea98c0528e04ef.exe
Files
-
3b955958829c8ea45e2de001bbd7da4a.bin.zip
Password: infected
-
5f78e94c7eabe39a9c6297db3f12ef5161d835c7c65928d990ea98c0528e04ef.exe.exe windows x64
Password: infected
7e5590227ad3aecb2feedda5da4da1cb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
CreateFileA
CloseHandle
GetLastError
CreateActCtxA
ActivateActCtx
DeactivateActCtx
GetFileAttributesA
LockFile
UnlockFile
SetFilePointer
OpenFileMappingA
CreateNamedPipeA
WaitNamedPipeA
ExitProcess
VirtualAlloc
GetDiskFreeSpaceA
GetDriveTypeA
Sections
.text Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 266KB - Virtual size: 266KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 285KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ