Static task
static1
Behavioral task
behavioral1
Sample
9908463593e6a22247db288d2966051a140a36fc712d5b546a3112ebba6b0483.exe
Resource
win7-20231020-en
General
-
Target
98c02979db19eb538ac83e8cd8e83cf9.bin
-
Size
1.2MB
-
MD5
b65f0581e26ead2faa4875d44d8fdca7
-
SHA1
cf800773c89bb5fa7d281c66b38a3058a63df1ac
-
SHA256
59f3bb03e8359dc0826c783a916b12f724aa5b1e51350b2d6234ea6c0dbf32d8
-
SHA512
574ed77508d536f7a959df2a38bf3ba5285bbd4753142ecf38edc1faa9930a8943fc47d7087a1fde8e9df466f80a6e8d64a17b12bc7978b747ad520120f2b62b
-
SSDEEP
24576:83vAcFSRnhakvxc6TP7YT2yVWKCq25QUyv96noqUz5/c:83vAcFSTUsdS1CqEQ1wnZz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9908463593e6a22247db288d2966051a140a36fc712d5b546a3112ebba6b0483.exe
Files
-
98c02979db19eb538ac83e8cd8e83cf9.bin.zip
Password: infected
-
9908463593e6a22247db288d2966051a140a36fc712d5b546a3112ebba6b0483.exe.exe windows:4 windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 391KB - Virtual size: 390KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ