AssertAndCrash
Static task
static1
Behavioral task
behavioral1
Sample
9872d6f5c61ea25c51ab5cd0a82f26e04a21aebba11a91213e0a895ac26f1101.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
9872d6f5c61ea25c51ab5cd0a82f26e04a21aebba11a91213e0a895ac26f1101.exe
Resource
win10v2004-20231020-en
General
-
Target
9872d6f5c61ea25c51ab5cd0a82f26e04a21aebba11a91213e0a895ac26f1101.exe.zip
-
Size
4.6MB
-
MD5
431354b992f8d4eb8b8a22525886625e
-
SHA1
bb14e5fe2aad17e78baab666176586ceba6b8240
-
SHA256
60793c71b60c3746ba80e94edd4f3cc3798a7848e0b31261d25e146ea0cdfc41
-
SHA512
90bcd6687d0842d02e3c836565f477558d15dba37f145ca358286b7cc0a0e79db212f51a894d847dd0ca1a3387cec3d80dcdde03c716d0c1f6265b8220582006
-
SSDEEP
98304:na+PhgUB9GRSnRqlVhMiBZmaerV3xKcVscm3BQoUMEzPYk:1PaUB8RSnImO1erLKcycTVME
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9872d6f5c61ea25c51ab5cd0a82f26e04a21aebba11a91213e0a895ac26f1101.exe
Files
-
9872d6f5c61ea25c51ab5cd0a82f26e04a21aebba11a91213e0a895ac26f1101.exe.zip.zip
Password: infected
-
9872d6f5c61ea25c51ab5cd0a82f26e04a21aebba11a91213e0a895ac26f1101.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.text Size: 5.9MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 858KB - Virtual size: 857KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 483KB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 25B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 167KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.enigma1 Size: 992KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE