Static task
static1
Behavioral task
behavioral1
Sample
ea956420a8461b1aea880e09f5a85ae28cf70373f9e2e87a7304413f8be0ac8b.exe
Resource
win7-20231215-en
General
-
Target
f8ad51561a618f29fdb37b7f17ca6fe0.bin
-
Size
840KB
-
MD5
0fedc7d5f8f16600ce5b9b9c696cd916
-
SHA1
5547f243dd17d34d25f5cf53dfc37455af21e6f9
-
SHA256
f906a2852b074687e98dc4da98b46d4a87c0fb726d2ac18b43d1fa7b5bcb4b7a
-
SHA512
e62d8d374c552b1481e1919f797558230c82edc75a8dfcf0fa23f0889cd7a353cd68e84848101a81ad75d24279c6866f934b3e92605a17dbb74c8c14c68e22cd
-
SSDEEP
12288:jjisNCbcSXZ+dLYw3Kg+PMl4z3cLs08kCV2ybB4J6Y75uLppZ33caq1qVbJb7+UD:OdpdGKtPG4z3EsgTyb17ThQr2b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ea956420a8461b1aea880e09f5a85ae28cf70373f9e2e87a7304413f8be0ac8b.exe
Files
-
f8ad51561a618f29fdb37b7f17ca6fe0.bin.zip
Password: infected
-
ea956420a8461b1aea880e09f5a85ae28cf70373f9e2e87a7304413f8be0ac8b.exe.exe windows:6 windows x86 arch:x86
Password: infected
2388fee6ad8ce4f4a35dbaf64e2da01a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
EnumDisplayDevicesA
advapi32
CredEnumerateA
comctl32
PropertySheet
Sections
Size: - Virtual size: 1.3MB
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE