Static task
static1
Behavioral task
behavioral1
Sample
04d2d83484595a9be7fe1207f90dda87c5590f808a902a0fbe055e4cb8806d8a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
04d2d83484595a9be7fe1207f90dda87c5590f808a902a0fbe055e4cb8806d8a.exe
Resource
win10v2004-20231215-en
General
-
Target
7a7777f191c5515b5bb8c4335d5498c4.bin
-
Size
86KB
-
MD5
19e1884121e2872e609d2d9b2c0810fe
-
SHA1
e3c5aa15c62201921f703ca9aaa9fa46a8c69a44
-
SHA256
5262635a1779d42effddd9934f1dba4c278956b3fde7b452df9a0e88db707908
-
SHA512
fc0de7b99092737bb87de35db0de90f3bdb3be2004cdc7fee47757f781f8c6bd71d1d7642a15a528309b0c45f5561fdd76b59ac460e26e5b155ce5ab9edcd344
-
SSDEEP
1536:AWbYgJAURzgziKsU8m0hWiz3qO4f5Zh4u84iHhceimmdnHwiKGvkeG825:AWkCRz0iKFLqWiXsh4u8JHSKSw825
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/04d2d83484595a9be7fe1207f90dda87c5590f808a902a0fbe055e4cb8806d8a.exe
Files
-
7a7777f191c5515b5bb8c4335d5498c4.bin.zip
Password: infected
-
04d2d83484595a9be7fe1207f90dda87c5590f808a902a0fbe055e4cb8806d8a.exe.exe windows:1 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.clam01 Size: 239KB - Virtual size: 239KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE