Static task
static1
Behavioral task
behavioral1
Sample
011a9a49c4c3e8926a74de470234f64c9fa0b796b0f7936cd399cfd5ce9634a1.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
011a9a49c4c3e8926a74de470234f64c9fa0b796b0f7936cd399cfd5ce9634a1.exe
Resource
win10v2004-20240226-en
General
-
Target
7b12a0c03b467c82911a1fe89bbca5f6.bin
-
Size
355KB
-
MD5
c8497b15d27b953bb8a27d519243b3d8
-
SHA1
d58ecc666b3e41d8c8f8991d6c1ede45068b76f1
-
SHA256
b3ec7ce39163814c39b9c1d0f9059e6e0a526732c6061132902a38cf646f0802
-
SHA512
6591c8bed37e4b116784d389240bfe7c912874f39fb14fa23188e7c66ef03c856b0732b6f8db38c49f3c02206a2a16a762ff46597a657feac9d589fc1950b076
-
SSDEEP
6144:ug3L64qb0p/wGbYX5a64USUECfkoFUa2QCh7TegrhdG420dhzmziD54:76ppSYJa64HUE4koLChPTrTG50XmGd4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/011a9a49c4c3e8926a74de470234f64c9fa0b796b0f7936cd399cfd5ce9634a1.exe
Files
-
7b12a0c03b467c82911a1fe89bbca5f6.bin.zip
Password: infected
-
011a9a49c4c3e8926a74de470234f64c9fa0b796b0f7936cd399cfd5ce9634a1.exe.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 612KB - Virtual size: 612KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 300KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ