Static task
static1
Behavioral task
behavioral1
Sample
575b383910f7e77da60980197d06a6f412c1591d1ec381a3e8e0314960b5d261.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
575b383910f7e77da60980197d06a6f412c1591d1ec381a3e8e0314960b5d261.exe
Resource
win10v2004-20231023-en
General
-
Target
575b383910f7e77da60980197d06a6f412c1591d1ec381a3e8e0314960b5d261.7z
-
Size
411KB
-
MD5
d7287c0384152d9b415f37f4148158bb
-
SHA1
7e056211d48d6e6220e8cf4326164c6a499b21e3
-
SHA256
de921f57ed9132cddada4e0445c10e88f93d04f1c6f7b729d42e9278bf801c41
-
SHA512
fd3e4fdf41f6c0c4681ef2c65413d91bdb1fa86344b8559b6cb4645c107b3bdaf1679885f8d7d80371114abf903cd96092da44c867c1ed46785cb6d065181cba
-
SSDEEP
6144:wA0iSInEgqS6XfRZ2BT6ZR1YhpmU52DjqqTLr2aHIp3QDxoDfsT49D1+mzNvp0eB:hHnEgqSkJ1sLX+qqTLIQF21Pz0eYKP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/575b383910f7e77da60980197d06a6f412c1591d1ec381a3e8e0314960b5d261
Files
-
575b383910f7e77da60980197d06a6f412c1591d1ec381a3e8e0314960b5d261.7z.7z
Password: infected
-
575b383910f7e77da60980197d06a6f412c1591d1ec381a3e8e0314960b5d261.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 893KB - Virtual size: 892KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ