Static task
static1
Behavioral task
behavioral1
Sample
b98bf14f443ca064cd02bb82354743bcc4ac70a57a66ada9d058bb3bb201b9a1.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
b98bf14f443ca064cd02bb82354743bcc4ac70a57a66ada9d058bb3bb201b9a1.exe
Resource
win10v2004-20231020-en
General
-
Target
b98bf14f443ca064cd02bb82354743bcc4ac70a57a66ada9d058bb3bb201b9a1.zip
-
Size
2.6MB
-
MD5
cf0f2a96e4fd47a29caeec99a5f19309
-
SHA1
acc5f8faa2e7b0cd0ef5ce7fcc909549b53dd897
-
SHA256
4e5bdd94f8b8418989fab6581f50d49fa68d70e3a31ec7efa7cdc802b3df2ffe
-
SHA512
00feee6634ad2b7b52f0fc0fe257a2dfb285a497a476065b59e1d7b5088f8698de5c7956e23605ebd9e145e5d38086d4304ce447c15483e7d91ea28b73ca33ec
-
SSDEEP
49152:r9lhn5PjQubUJXGQWvOMFs9ZhfM+sESeKVDvgIKqmb/MLRbHoZm8r72jzYVrEw0R:rPjBTfsN07xHKHbULR01BYF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b98bf14f443ca064cd02bb82354743bcc4ac70a57a66ada9d058bb3bb201b9a1.exe
Files
-
b98bf14f443ca064cd02bb82354743bcc4ac70a57a66ada9d058bb3bb201b9a1.zip.zip
Password: infected
-
b98bf14f443ca064cd02bb82354743bcc4ac70a57a66ada9d058bb3bb201b9a1.exe.exe windows:1 windows x86 arch:x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ