Behavioral task
behavioral1
Sample
95D77ABC7FCC0ADCC0E1E14F92628D2C.exe
Resource
win7-20231215-en
General
-
Target
95D77ABC7FCC0ADCC0E1E14F92628D2C.exe
-
Size
3.6MB
-
MD5
95d77abc7fcc0adcc0e1e14f92628d2c
-
SHA1
ff01b31a3e3c0ee13b60d6ace94f22dbc34d4548
-
SHA256
610fcf9f81cac31fcd0ef2569daad2a4fd8a989d9295e663442a3049739f3395
-
SHA512
3ce281fd730aa1ceef6fc308c90fab6c0f48e8ef3e61c1baf6ada36d10e4810707dcffb756364fcae1b73660e972418c67a4121cb8f67f4b1cab8b0238d0202b
-
SSDEEP
98304:twP52OwKRqyG3efsj6CGf2oP0xt+OtzWKUnVN:twPOws++oP0T+OQP
Malware Config
Signatures
-
Detect ZGRat V1 1 IoCs
resource yara_rule sample family_zgrat_v1 -
Zgrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95D77ABC7FCC0ADCC0E1E14F92628D2C.exe
Files
-
95D77ABC7FCC0ADCC0E1E14F92628D2C.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ