Static task
static1
Behavioral task
behavioral1
Sample
3a659609850664cbc0683c8c7b92be816254eb9306e7fb12ad79d5a9af0fb623.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
3a659609850664cbc0683c8c7b92be816254eb9306e7fb12ad79d5a9af0fb623.exe
Resource
win10v2004-20240226-en
General
-
Target
3a659609850664cbc0683c8c7b92be816254eb9306e7fb12ad79d5a9af0fb623.zip
-
Size
4.4MB
-
MD5
2d61a56c9faeaf6f3b1f8c831278fb85
-
SHA1
00b5c7d08f40b4679266b787945df44a3577e1e0
-
SHA256
75b53b9476416ec6f9a24918f663a9bd268717e9d7762d01b60d176a308dcd82
-
SHA512
d4380c8b6cd2cfabaa728783191ad9cf1af6b8e32e9a337a1bb47ba716143a758c2c5f15ad5ace78220be003dec28b3985eb0446e1024ce401a8e995f22c9cb8
-
SSDEEP
98304:u6X3Wd8EvPXZwON7+XXA/o1uY/GennEkDyrDWoKyXEs0ZStop:D3cJvPm+7MAw1uInVDwWvuYZgY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/3a659609850664cbc0683c8c7b92be816254eb9306e7fb12ad79d5a9af0fb623.exe
Files
-
3a659609850664cbc0683c8c7b92be816254eb9306e7fb12ad79d5a9af0fb623.zip.zip
Password: infected
-
3a659609850664cbc0683c8c7b92be816254eb9306e7fb12ad79d5a9af0fb623.exe.exe windows:5 windows x86 arch:x86
5d85e9bd7b32de0958c404af2cf1e756
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetPixel
user32
LoadMenuW
kernel32
GetLastError
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sections
.text Size: - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dtd0 Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.dtd1 Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dtd2 Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ