Static task
static1
Behavioral task
behavioral1
Sample
2cab1566a89734389b4cdf0e311d947a7c64c62bd9557cd72f5921fc721432e4.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2cab1566a89734389b4cdf0e311d947a7c64c62bd9557cd72f5921fc721432e4.exe
Resource
win10v2004-20231215-en
General
-
Target
02e02e7a91db85a2d61188b14612dfc5.bin
-
Size
580KB
-
MD5
21253def31cc7e64f22930324d70cd2f
-
SHA1
0d4ef88bbbd47b8aba6e20dbfeb76c41d11a95e7
-
SHA256
36fe53e55ec2e3664f283241eb7a7f3a01c546a348794ca3375f6b9d132de8fc
-
SHA512
260f45720d5c7d9f4bed4578f43c9504caede5324f6d4c8c19c46f7000ef5c25de3ee3594b0df708f1ffd2794b100a9cbed47378fcddc4247a7f7ee985f9e9ec
-
SSDEEP
12288:JcIZhoJ0YeRq9Tzu4qhdN3LFubxFd7ZLQY0DYY:iIZbYeRfLFud9UDYY
Malware Config
Signatures
Files
-
02e02e7a91db85a2d61188b14612dfc5.bin.zip
Password: infected
-
2cab1566a89734389b4cdf0e311d947a7c64c62bd9557cd72f5921fc721432e4.exe.exe windows:4 windows x86 arch:x86
Password: infected
Code Sign
16:30:24:3f:fa:06:c3:50:ba:85:6b:73:85:6b:ad:d9Certificate
IssuerCN=Mad-Monkey Root CertificateNot Before28/11/2008, 20:14Not After31/12/2039, 23:59SubjectCN=Mad-Monkey SPC Certificate2a:fc:45:df:5b:a7:91:d4:cf:da:5a:88:31:0b:b8:e2:8a:b7:4e:c5Signer
Actual PE Digest2a:fc:45:df:5b:a7:91:d4:cf:da:5a:88:31:0b:b8:e2:8a:b7:4e:c5Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 975KB - Virtual size: 975KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 13KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 194KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ