Static task
static1
Behavioral task
behavioral1
Sample
RegBlank/RegBlank.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
RegBlank/RegBlank.exe
Resource
win10v2004-20231020-en
General
-
Target
c0d0d2d31f4ea1dff0c70df119f4f62ca30d4e7ede0a23483c7225b5b0ca45f3.zip.zip
-
Size
140KB
-
MD5
d146de3b79520118d6e9934d84fcffd0
-
SHA1
671494177a37ec497d55ef03fddf85c9b98225d5
-
SHA256
0782813ab5225a1f3f2ee1b9354429689b2ad4460cd03f7952211cbbbf21a3b3
-
SHA512
1d890f9ccb9f9e62c2bf49802e9a907f16661478ff0eae6b2a08a9ea744fb119d4e20359691a30ceb592d1e5f107f2764c61374457689ed69692529a27daae8f
-
SSDEEP
3072:1b7k5Q5ol7OPP1S4xdwZ9qV6BIZWvHf/1IWYtlG+QCRc5J8daUF:y5L7On84Pa98jWvHi9kedF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/RegBlank/RegBlank.exe
Files
-
c0d0d2d31f4ea1dff0c70df119f4f62ca30d4e7ede0a23483c7225b5b0ca45f3.zip.zip.zip
Password: infected
-
c0d0d2d31f4ea1dff0c70df119f4f62ca30d4e7ede0a23483c7225b5b0ca45f3.zip.zip
-
RegBlank/Readme.txt
-
RegBlank/RegBlank.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 125KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE