Static task
static1
Behavioral task
behavioral1
Sample
bd2121f85a4f7cb088c427636f6fed7e02ed42d94e568f6de376be1774885fa4.exe
Resource
win7-20231215-en
General
-
Target
a16ae21452d2bc3fa746b98858e504c9.bin
-
Size
2.2MB
-
MD5
4716125bb303f34e401dbb8827c25943
-
SHA1
1ffdb6799b47d15896a9f4c48e13ef903ab97100
-
SHA256
4730950917457e7414519a6d7dc6c63b37ad09cb835f291456449fae95f67e1b
-
SHA512
f0df9e72ee1b7583bbef6ebe8431f3c54ffbecf7ffdad38c174f89d55d1ce21d3d1c39fbbf5dde7419ff0eb2d03020934fe21bce86bcda5d674f9eeb6a4b272d
-
SSDEEP
49152:DWA8t7E7CqAMo33Cv51VBvZpZvSQICx8SsXfyp7ETL:qBWXArHChPBhpgnCxiY7EH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/bd2121f85a4f7cb088c427636f6fed7e02ed42d94e568f6de376be1774885fa4.exe
Files
-
a16ae21452d2bc3fa746b98858e504c9.bin.zip
Password: infected
-
bd2121f85a4f7cb088c427636f6fed7e02ed42d94e568f6de376be1774885fa4.exe.exe windows:6 windows x86 arch:x86
Password: infected
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 568KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hfpusnvb Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xdvgumpy Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE