Static task
static1
Behavioral task
behavioral1
Sample
b14ccb3786af7553f7c251623499a7fe67974dde69d3dffd65733871cddf6b6d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b14ccb3786af7553f7c251623499a7fe67974dde69d3dffd65733871cddf6b6d.exe
Resource
win10v2004-20230831-en
General
-
Target
14a09a48ad23fe0ea5a180bee8cb750a.bin
-
Size
140KB
-
MD5
9564051f7c618b2c1c760d6350cddbe8
-
SHA1
8b0eda12ca1d65eb3a9c4dc7ecd40898966987d8
-
SHA256
9cce295e9bf2c509f6fe73fd9c59334bde92cf2965ee54432c270718f28d54fa
-
SHA512
8b3e7be223415b5341eae4d7b17885fb860e0670b8afca1b12f715c67ac40f3243c87320374aff137a4446881e0cefe75f9095fbd8e92f6964e0f025c3f1d0ec
-
SSDEEP
3072:eJqdVEgg0tbUgDdpYJ4HFGjCQuez7SjJ2HWuinUndc1BvWLrQae0:eImCt42koGjJulgMMeB+ln
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b14ccb3786af7553f7c251623499a7fe67974dde69d3dffd65733871cddf6b6d.bin
Files
-
14a09a48ad23fe0ea5a180bee8cb750a.bin.zip
Password: infected
-
b14ccb3786af7553f7c251623499a7fe67974dde69d3dffd65733871cddf6b6d.bin.exe windows x86
Password: infected
a7333743ef063a68d1d860bbdf1c328e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
VirtualAlloc
Sections
Size: 74KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 984KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE