Static task
static1
Behavioral task
behavioral1
Sample
d369331aac52ca22cc9270ea0f189c307fa5e0301c252272c434cc9d513b3f52.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
d369331aac52ca22cc9270ea0f189c307fa5e0301c252272c434cc9d513b3f52.exe
Resource
win10v2004-20230915-en
General
-
Target
2509540aaaab154c8a0dcf7b228dd861.bin
-
Size
351KB
-
MD5
fabc7bcf3a9822f70c9d29235ed6eee6
-
SHA1
826a77993046ac8bb64e0fcd6440162cab49d419
-
SHA256
3026c328d093d4eb1befdfbf5170fdeda993dfae75e74d516d9cd176cd8c95b8
-
SHA512
a8e83a73d8872ce13b55c1273c6a55a653fcc9da03dce11556465a3ce7d342127b9a0554a910a42bceb89c48c05b32afedd5647173a6cfb3c2c1e23cdbe56009
-
SSDEEP
6144:S/+85FhUc7XzCA5IMnseNP9frDn1exJv6Y2HVLhXtqYIK9uYjj4nA:P8Rz2A+cs0frr1qbWVLhXtTIK/vOA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d369331aac52ca22cc9270ea0f189c307fa5e0301c252272c434cc9d513b3f52.exe
Files
-
2509540aaaab154c8a0dcf7b228dd861.bin.zip
Password: infected
-
d369331aac52ca22cc9270ea0f189c307fa5e0301c252272c434cc9d513b3f52.exe.exe windows:4 windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 776KB - Virtual size: 780KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE