Static task
static1
Behavioral task
behavioral1
Sample
e1d4bb21d92ff97e94b21dc94cd96aa33adf11cda9d40ca5ed1973982cd40fda.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e1d4bb21d92ff97e94b21dc94cd96aa33adf11cda9d40ca5ed1973982cd40fda.exe
Resource
win10v2004-20230915-en
General
-
Target
4265973418d8ceb57a09874080124bc7.bin
-
Size
14KB
-
MD5
d2072d799445851c5519e45d63836e44
-
SHA1
5c4226dba7300cac35b6b5a6ea0249f1f074fe4a
-
SHA256
99e765a9c98b874dd77257a7e3b362a37ebdbff541808db2ee82347ee575ff31
-
SHA512
3426c005a359dd9c99ecfba0ea079554d68234f07c6683de214ef8ad9bba27660fea8752360c0a20fcf523eee367bcaca823bcbe121892e08f48404d89a3e009
-
SSDEEP
384:DofVz8poz5OhkKJ1r+WZfbp74sxg3L9jSIFZwcewMI+crrKHl:DofaozBKDr+M4sxg3LtSwZwqMI/KF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/e1d4bb21d92ff97e94b21dc94cd96aa33adf11cda9d40ca5ed1973982cd40fda.exe
Files
-
4265973418d8ceb57a09874080124bc7.bin.zip
Password: infected
-
e1d4bb21d92ff97e94b21dc94cd96aa33adf11cda9d40ca5ed1973982cd40fda.exe.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ