Static task
static1
Behavioral task
behavioral1
Sample
6a581c0c07ceb888ea418fccffd5efba33b9fd6561be1bcf90b0d6ba4deefd05.exe
Resource
win7-20231215-en
General
-
Target
0365bbbde06f465f860a73f5fd7b38da.bin
-
Size
96KB
-
MD5
f92f020384071451c5d15e25ae8e08ee
-
SHA1
d81aed67c76122cd85845fe1b78b13f42c413568
-
SHA256
15a9ca6bf29ab73d6fe40a29f98032def28a97a1400714ee32fbe0062f64089e
-
SHA512
41c2e1ace944d083bcb4d64fc083b282458e303d1ffc912e7787f01b955c7a1c04d45c7796d77412243cdc03fd57efff87b1fd91b93e3c448d6185d1fd8d6e6d
-
SSDEEP
3072:lAFgcNIZxeEEi3dLyaqtqm5Aon28g+B/t8LriTM:qSOIbe7gBq/5X2f+B/WLZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/6a581c0c07ceb888ea418fccffd5efba33b9fd6561be1bcf90b0d6ba4deefd05.exe
Files
-
0365bbbde06f465f860a73f5fd7b38da.bin.zip
Password: infected
-
6a581c0c07ceb888ea418fccffd5efba33b9fd6561be1bcf90b0d6ba4deefd05.exe.exe windows:4 windows x86 arch:x86
Password: infected
60fd1f8a4d62b3c300aa0a0b884a4c8f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatW
GetModuleHandleA
GetProcAddress
CloseHandle
GetWindowsDirectoryW
CreateFileW
VirtualAllocEx
user32
LoadIconA
advapi32
RegOpenKeyW
RegCloseKey
Sections
.text Size: 142KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data6 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data5 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data4 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data3 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 220B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BduSKtJY Size: 3KB - Virtual size: 3KB
udNHhieY Size: 2KB - Virtual size: 1KB
SuGHWNSe Size: 4KB - Virtual size: 3KB
TgmkROaB Size: 1KB - Virtual size: 1KB
KAzdaSrM Size: 512B - Virtual size: 171B
NWunRseh Size: 1024B - Virtual size: 890B
neGdFDwu Size: 1024B - Virtual size: 943B
EvqMpABl Size: 2KB - Virtual size: 1KB
iAQOqhfr Size: 6KB - Virtual size: 5KB
CKxtPTrz Size: 7KB - Virtual size: 7KB