Static task
static1
Behavioral task
behavioral1
Sample
e0961050c4eb320076ad82ac62a7fb19aaa5326e42e471cf776a4ca38edc9af7.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
e0961050c4eb320076ad82ac62a7fb19aaa5326e42e471cf776a4ca38edc9af7.exe
Resource
win10v2004-20231020-en
General
-
Target
e03c4b1206aae90545d80f2387d086a0.bin
-
Size
3.1MB
-
MD5
58739dcec3b70d8d1835f6cbe9330726
-
SHA1
a8c2883c8f180229f0059cca564f1f629adf04b6
-
SHA256
3e9dd30d8a6953f15ac753ad60d9ebc8f93f16a56d751a5e82176f8b79b1853b
-
SHA512
37db4b3a52ce2a5556914faaa52f38c1a27c483b203269eb4988ea585c747500354c4adb3b06deb62875af69b02c8717258151f3b0ef12029daf1caee714896f
-
SSDEEP
98304:mLL8HdKX/F+on2nQ6hg1ufqd3IHlwJC5z8pN:uwdi/Yon2QZM9lwJCs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/e0961050c4eb320076ad82ac62a7fb19aaa5326e42e471cf776a4ca38edc9af7.exe
Files
-
e03c4b1206aae90545d80f2387d086a0.bin.zip
Password: infected
-
e0961050c4eb320076ad82ac62a7fb19aaa5326e42e471cf776a4ca38edc9af7.exe.exe windows:5 windows x86 arch:x86
Password: infected
878872afaec683270cbfcfd1fbc3f383
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32 kernel32
ScrollWindow �#�
Sections
CODE Size: 1.8MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ