Static task
static1
Behavioral task
behavioral1
Sample
e9cace18923b153625052e9aba3ee7cf793d5a40c11a23fa3e1bab1794349b3b.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e9cace18923b153625052e9aba3ee7cf793d5a40c11a23fa3e1bab1794349b3b.dll
Resource
win10v2004-20230915-en
General
-
Target
f36470d54057f976466a5abbc5241a9b.bin
-
Size
45KB
-
MD5
6da59fb1e26c7d128ed31a65ab387ede
-
SHA1
d1ad0c173d3e407a0e9a1e02d8dbb1fd32796c6b
-
SHA256
c5fee5ea851a2bae1d1fae4cd4086b3269dcf0510270fb63be862f0903da6237
-
SHA512
f725c34fc39aa77b90f35d06069dc515ba41500242a36dd7f42fc770cf18b846f444c4fde3ade0328cfda46fccb6f9229fb18488e2eed5b6aebe8712ab401fc7
-
SSDEEP
768:fWlkvw6gRldd36s5I4JLLNYXjdCO0a2rGRaFGisIFo6pRiOq1XxyPFFEzg55ZC:DwRRlb6sPJ8JCV2isiwxq3ag55I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/e9cace18923b153625052e9aba3ee7cf793d5a40c11a23fa3e1bab1794349b3b.dll
Files
-
f36470d54057f976466a5abbc5241a9b.bin.zip
Password: infected
-
e9cace18923b153625052e9aba3ee7cf793d5a40c11a23fa3e1bab1794349b3b.dll.dll windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ