Static task
static1
Behavioral task
behavioral1
Sample
7193cbc2f1fd3e79ff7d710e11d76f3c22a16e1373fe7638e8f68cc02a8278e2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7193cbc2f1fd3e79ff7d710e11d76f3c22a16e1373fe7638e8f68cc02a8278e2.exe
Resource
win10v2004-20240226-en
General
-
Target
7ad3f2440080b451007041ab312cd44f.bin
-
Size
1.5MB
-
MD5
d19e6b0efa71c87b04d6f05411a3070b
-
SHA1
7ff1fa19acd96c4a6d02e4114e1e4a512f5389d0
-
SHA256
34cffb54d934dc8c385e6c30bb91e9a72d6e71b618b9a70cf82571f3a737be69
-
SHA512
61a95f61313d67654386290408298e69688a655d023556219ddbbbb77c6188f3517dda8f953bcea4028b0c392a1f46e9eec535987e32acafb736db82d13e7d14
-
SSDEEP
49152:4iIVjgZca/1mE0V02HjV9+MgaASNZOqw2oM5N2e:4iItr60yWx9FgaFN8qwRMae
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/7193cbc2f1fd3e79ff7d710e11d76f3c22a16e1373fe7638e8f68cc02a8278e2.exe
Files
-
7ad3f2440080b451007041ab312cd44f.bin.zip
Password: infected
-
7193cbc2f1fd3e79ff7d710e11d76f3c22a16e1373fe7638e8f68cc02a8278e2.exe.exe windows:4 windows x86 arch:x86
Password: infected
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 280KB - Virtual size: 736KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 308KB - Virtual size: 978KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
thqvhzmi Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ngtfytop Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE