Static task
static1
Behavioral task
behavioral1
Sample
7228a4a0ee6bc15b54085d0acbd352cb4c9d9ff7f6705d2f0db12f0852b44458.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
7228a4a0ee6bc15b54085d0acbd352cb4c9d9ff7f6705d2f0db12f0852b44458.exe
Resource
win10v2004-20230915-en
General
-
Target
18497513475657f40fc01dcbcdd8cbbe.bin
-
Size
5KB
-
MD5
e4fb6f30c27941157e4de4646c7e96a1
-
SHA1
30ac527feb99a40200ec9a76dc4e63071a5fee7c
-
SHA256
38f717da51d7ffa3a2eac7749d80f63150a364022328d428f97f9eafb06d26a6
-
SHA512
a6d97b14539414b3e22ce8a5187fcfe2c4d1bcaa3070e9a16a17d1118480a2838fcbeadd88e114d1b81bafd0e940c45ab4c92a589a2c8a7b3f2a45947387d275
-
SSDEEP
96:cHAacS3yhyO2R/niTm/w1KVmpi8L68PN99TktPFdUZe3dxNlQP+GHX:O3Ap2Jnii4cVEi8Lt9Irh3dHlQz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/7228a4a0ee6bc15b54085d0acbd352cb4c9d9ff7f6705d2f0db12f0852b44458.exe
Files
-
18497513475657f40fc01dcbcdd8cbbe.bin.zip
Password: infected
-
7228a4a0ee6bc15b54085d0acbd352cb4c9d9ff7f6705d2f0db12f0852b44458.exe.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ