Static task
static1
Behavioral task
behavioral1
Sample
87c3f7ca20c49702a32d856ec35f865b56dd957ee6abb73b9c12c22c18cacc34.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
87c3f7ca20c49702a32d856ec35f865b56dd957ee6abb73b9c12c22c18cacc34.exe
Resource
win10v2004-20230915-en
General
-
Target
1b33edc88eb0056b1cff46f66cf04eee.bin
-
Size
2.5MB
-
MD5
3d6ab76d658f3d14d3b4bd1f9ceee2ea
-
SHA1
f34b19eb8509d613ce065544af9cb4e82f4c76c5
-
SHA256
fcc21d3ac869854497437346e8d504cb83d9543407672b7571a24612f742abe3
-
SHA512
da4d6518d4384cd094cd7de9a11049e361b57a6a3ab89d09002ca30a327e43fc4c9ae1dbc5ded08741e02b4d847a92511fab28d755e0f987a2fd8216a569aa13
-
SSDEEP
49152:yExAGx52Vqthtrgsg/NiFZVu4/hIp2jBcF6tOIgFbsZ0VMGF:hP/tr1XFjp/hImBcsMxsZ0SW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/87c3f7ca20c49702a32d856ec35f865b56dd957ee6abb73b9c12c22c18cacc34.exe
Files
-
1b33edc88eb0056b1cff46f66cf04eee.bin.zip
Password: infected
-
87c3f7ca20c49702a32d856ec35f865b56dd957ee6abb73b9c12c22c18cacc34.exe.exe windows:4 windows x86
Password: infected
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 4KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 111KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE