Static task
static1
Behavioral task
behavioral1
Sample
f7f81954dbcf0eac65532bc3dbe75263584d9259ca4ace917ffc218341c14190.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f7f81954dbcf0eac65532bc3dbe75263584d9259ca4ace917ffc218341c14190.exe
Resource
win10v2004-20231222-en
General
-
Target
269b20a9ce7f2832bbb45aeabae815ba.bin
-
Size
1.7MB
-
MD5
7e1c9e4677ec0ddfd21a92feeb78dcd3
-
SHA1
1d65702b33f02e592e62e36c5b8ec5c232e6e900
-
SHA256
be95faa86db3fc719867299a5cfe029f64668bcac450941374f4bf416036b80e
-
SHA512
dda3fbdb9bf0a13cc3d8a26ebbff93e85b5547346e83d486f7e8b04aa1c76b42f52a080d1d18664ac8ff496475a5eb74c1ec4faa3dd95178047be2b4595de84d
-
SSDEEP
49152:WfkpZxfkJPpuB+/K81Bwf68eSdQ3HK09cN3b4RV:WfkpZNkJBciK8bwf6gdQ3q0+N3b4n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/f7f81954dbcf0eac65532bc3dbe75263584d9259ca4ace917ffc218341c14190.exe
Files
-
269b20a9ce7f2832bbb45aeabae815ba.bin.zip
Password: infected
-
f7f81954dbcf0eac65532bc3dbe75263584d9259ca4ace917ffc218341c14190.exe.exe windows:6 windows x86 arch:x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 492KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 80KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 28KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 990KB - Virtual size: 992KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE