Static task
static1
Behavioral task
behavioral1
Sample
fe3c93db5bfab8423d142e07b5adc73620d8a492f2ac67f4ade1e40bf3abd7cc.exe
Resource
win7-20230831-en
General
-
Target
cf19e55c9604d5c002ac7b9770c529de.bin
-
Size
495KB
-
MD5
033feef6b41458ba5899c1c8038bd9b4
-
SHA1
e0e38d49e0bcbd49cf082dbe4043e24e91af0714
-
SHA256
73e32fa67fb6e5da1b66c4fcbd3e6bfb22bb515ae4ee66773e9185de68f66b3d
-
SHA512
16e3b259aed0c6fe9d323aff857e5f6df6627425584d2917457691d19fbb27ff9210a1861206bb1a90324b05cdf66e3e2b089abebfaff0bcb954dac2deea550b
-
SSDEEP
12288:0uRGC6VRQFsH8eyXX5RXVOtkP6BcihmGEc+vYJHFkC+bwMBz:0uRB6b6o8tpO6A7EfoHFkCLMBz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/fe3c93db5bfab8423d142e07b5adc73620d8a492f2ac67f4ade1e40bf3abd7cc.exe
Files
-
cf19e55c9604d5c002ac7b9770c529de.bin.zip
Password: infected
-
fe3c93db5bfab8423d142e07b5adc73620d8a492f2ac67f4ade1e40bf3abd7cc.exe.exe windows x64
Password: infected
7e5590227ad3aecb2feedda5da4da1cb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
CreateFileA
CloseHandle
GetLastError
CreateActCtxA
ActivateActCtx
DeactivateActCtx
GetFileAttributesA
LockFile
UnlockFile
SetFilePointer
OpenFileMappingA
CreateNamedPipeA
WaitNamedPipeA
ExitProcess
VirtualAlloc
GetDiskFreeSpaceA
GetDriveTypeA
Sections
.text Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 269KB - Virtual size: 269KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 286KB - Virtual size: 285KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ